CVE-2022-46377
10.05.2023, 16:15
An out-of-bounds read vulnerability exists in the PORT command parameter extraction functionality of Weston Embedded uC-FTPs v 1.98.00. A specially-crafted set of network packets can lead to denial of service. An attacker can send packets to trigger this vulnerability.This vulnerability occurs when no IP address argument is provided to the `PORT` command.Enginsight
| Vendor | Product | Version |
|---|---|---|
| weston-embedded | uc-ftps | 1.98.00 |
𝑥
= Vulnerable software versions
Common Weakness Enumeration
- CWE-823 - Use of Out-of-range Pointer OffsetThe program performs pointer arithmetic on a valid pointer, but it uses an offset that can point outside of the intended range of valid memory locations for the resulting pointer.
- CWE-125 - Out-of-bounds ReadThe software reads data past the end, or before the beginning, of the intended buffer.