CVE-2022-46377

HIGH 7.5CVE-2022-46377 · Published 10/05/2023 · updated 17/06/2026

In short

CVE-2022-46377 is a HIGH (CVSS 7.5) vulnerability affecting uc-ftps (weston-embedded).
Chance of exploitation in the next 30 days (EPSS): 1.5%, higher than 73.9% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
uc-ftps weston-embedded	`= 1.98.00`	No fix yet

Description

An out-of-bounds read vulnerability exists in the PORT command parameter extraction functionality of Weston Embedded uC-FTPs v 1.98.00. A specially-crafted set of network packets can lead to denial of service. An attacker can send packets to trigger this vulnerability.This vulnerability occurs when no IP address argument is provided to the `PORT` command.

References

weston-embedded/uC-FTPs#2 · Patch
talosintelligence.com/vulnerability_reports/TALOS-2022-1681 · Exploit
talosintelligence.com/vulnerability_reports/TALOS-2022-1681

More vulnerabilities in uc-ftps

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free