CVE-2021-47791

Summary

SmartFTP Client 10.0.2909.0 contains multiple denial of service vulnerabilities that allow attackers to crash the application through specific input manipulation. Attackers can trigger crashes by entering malformed paths, using invalid IP addresses, or clearing connection history in the client's interface.

Affected Software

Weaknesses

• CWE-770: Allocation of Resources Without Limits or Throttling

ADP Enrichment

CISA ADP Vulnrichment

• SSVC:
• Exploitation: poc
  • Automatable: no
  • Technical Impact: partial

Additional References

• https://www.exploit-db.com/exploits/50266

References

• https://www.exploit-db.com/exploits/50266
• https://www.smartftp.com/en-us/
• https://www.smartftp.com/en-us/download
• https://www.vulncheck.com/advisories/smartftp-client-multiple-denial-of-service

• ←Previous
• Next→