A critical buffer overflow in the Konica Minolta FTP Utility 1.0 LIST command permits remote code execution, creating a high-risk security exposure.

The application suffers from a buffer overflow (CWE-120) due to inadequate input validation in the LIST command. An unauthenticated attacker can send a malicious, oversized buffer to overwrite system registers, leading to service failure or code execution.

The potential for remote code execution makes this a high-priority threat, as it allows attackers to bypass standard authentication controls. With a CVSS score of 9.8, the business impact includes potential data exfiltration, system compromise, and significant operational downtime if the FTP service is critical to business processes.

Immediate Action: Update to the latest version of the utility if available; otherwise, decommission the service if it is not business-critical.

Proactive Monitoring: Analyze FTP traffic logs for unusual patterns or abnormally long command strings that match the identified attack vector.

Compensating Controls: Restrict access to the FTP service using firewalls to allow only known-trusted IP addresses and employ IPS rules to filter traffic for buffer overflow signatures.

Public Exploit Available: Yes — an ExploitDB entry (48501) exists.

Given the critical nature of this vulnerability and the presence of public exploit code, organizations must treat this as a high-priority remediation item. Patching or removal of the vulnerable software is the only effective way to mitigate the risk of unauthorized access.