Skip to content
Sign in
6.5 Medium

CVE-2022-46378 An out-of-bounds read vulnerability exists in the PORT command parameter extraction functionality of Weston Embedded…

Description

An out-of-bounds read vulnerability exists in the PORT command parameter extraction functionality of Weston Embedded uC-FTPs v 1.98.00. A specially-crafted set of network packets can lead to denial of service. An attacker can send packets to trigger this vulnerability.This vulnerability occurs when no port argument is provided to the `PORT` command.

Affected products and versions

Product Affected versions Fixed in
uC-FTPs Versions not published

Other CVEs of uC-FTPs

The 3 CVEs of uC-FTPs →
CVE-2022-41985 An authentication bypass vulnerability exists in the Authentication functionality of Weston Embedded uC-FTPs v 1.98.00 8.6 High CVE-2022-46377 An out-of-bounds read vulnerability exists in the PORT command parameter extraction functionality of Weston Embedded… 6.5 Medium
Track this CVE