CVE-2020-37031: Ashkon Software Simple Startup Manager

High severity, CVSS 8.4. EPSS: 0.2% chance of exploitation in the next 30 days.

Simple Startup Manager 1.17 contains a local buffer overflow vulnerability that allows attackers to execute arbitrary code by overwriting memory through the 'File' input parameter. Attackers can craft a malicious payload with 268 bytes to trigger code execution, bypassing DEP and overwriting memory addresses to launch calc.exe.

Affected products

• Ashkon Software Simple Startup Manager: version 1.17 only

Published 2026-01-30. Last modified 2026-06-17.