CVE-2020-37074: Lizardsystems Remote Desktop Audit

Critical severity, CVSS 9.8. EPSS: 0.4% chance of exploitation in the next 30 days.

Remote Desktop Audit 2.3.0.157 contains a buffer overflow vulnerability that allows attackers to execute arbitrary code during the Add Computers Wizard file import process. Attackers can craft a malicious payload file to trigger a structured exception handler (SEH) bypass and execute shellcode when importing computer lists.

Affected products

Published 2026-02-03. Last modified 2026-06-17.