Is CVE-2020-10188 being actively exploited?

CVE-2020-10188 is not currently listed in the CISA Known Exploited Vulnerabilities (KEV) catalog.

What is the CVSS score for CVE-2020-10188?

CVE-2020-10188 has a CVSS 3.1 base score of 9.8 (CRITICAL).

CVE-2020-10188

CRITICAL · CVSS 9.8EPSS 74.3%EU EUVD

utility.c in telnetd in netkit telnet through 0.17 allows remote attackers to execute arbitrary code via short writes or urgent data, because of a buffer overflow involving the netclear and nextitem functions.

Key facts

CVSS score: 9.8 (v3.1)
Severity: CRITICAL
CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weakness (CWE): CWE-120
EPSS score: 74.3% (99th percentile)
In CISA KEV: No
In EU EUVD: Yes (EUVD-2020-2649)
Published: March 6, 2020
NVD last modified: June 17, 2026
Status: Modified

EU Vulnerability Database (EUVD)

This vulnerability is also tracked by ENISA as EUVD-2020-2649 in the EU Vulnerability Database. Last updated in EUVD on January 21, 2026.

View on the EU Vulnerability Database

Affected products

arista / eos
arista / eos
debian / debian linux
debian / debian linux
fedoraproject / fedora
fedoraproject / fedora
fedoraproject / fedora
juniper / junos
juniper / junos
juniper / junos
juniper / junos
juniper / junos
juniper / junos
juniper / junos
juniper / junos
juniper / junos
juniper / junos
juniper / junos
juniper / junos
juniper / junos
juniper / junos
juniper / junos
juniper / junos
juniper / junos
juniper / junos
juniper / junos
juniper / junos
juniper / junos
juniper / junos
juniper / junos
juniper / junos
juniper / junos
juniper / junos
juniper / junos
juniper / junos
juniper / junos
juniper / junos
juniper / junos
juniper / junos
juniper / junos
juniper / junos
juniper / junos
juniper / junos
juniper / junos
juniper / junos
juniper / junos
juniper / junos
juniper / junos
juniper / junos
juniper / junos

and 308 more…

Certified products that may be affected

2 FIPS 140 or Common Criteria certified products, from automated matching by sec-certs.org.

Junos Space Network Management Platform, with or without Network Director and with or without Security Director in JA2500 - Juniper Networks, Inc. - FIPS 140 3816 - historical
Juniper Networks SRX345/SRX345-DUAL-AC with Junos 15.1X49-D110 - Juniper Networks, Inc. - FIPS 140 3247 - historical

References

http://www.openwall.com/lists/oss-security/2026/01/20/8
https://appgateresearch.blogspot.com/2020/02/bravestarr-fedora-31-netkit-telnetd_28.html(Third Party Advisory)
https://github.com/krb5/krb5-appl/blob/d00cd671dfe945791b33d4f1f6a5c57ae1667ef8/telnet/telnetd/utility.c#L205-L216(Patch, Third Party Advisory)
https://lists.debian.org/debian-lts-announce/2020/05/msg00012.html(Mailing List, Third Party Advisory)
https://lists.debian.org/debian-lts-announce/2020/08/msg00038.html(Mailing List, Third Party Advisory)
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7FMTRRQTYKWZD2GMXX3GLZV46OLPCLVK/
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HLU6FL24BSQQEB2SJC26NLJ2MANQDA7M/
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/K3VJ6V2Z3JRNJOBVHSOPMAC76PSSKG6A/
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-telnetd-EFJrEzPx(Third Party Advisory)
https://www.arista.com/en/support/advisories-notices/security-advisories/10702-security-advisory-48(Third Party Advisory)
https://www.oracle.com/security-alerts/cpuApr2021.html(Patch, Third Party Advisory)

Last updated September 17, 2026 · Source: NVD, CISA KEV, FIRST.org EPSS

Query CVEs from your AI assistant

The CVE/NVD Explorer brain answers CVE questions directly inside Claude, ChatGPT, or any MCP assistant — always up to date, no setup. Add it once and stop pasting advisories into chat.

Add the CVE brain