CVE-2022-46377
Published: 10 May 2023
Summary
CVE-2022-46377 is a medium-severity Use of Out-of-range Pointer Offset (CWE-823) vulnerability in Weston-Embedded Uc-Ftps. Its CVSS base score is 6.5 (Medium).
Operationally, ranked in the top 35.8% of CVEs by exploit likelihood; it is not currently listed in the CISA KEV catalog; a public proof-of-concept is referenced.
EU & UK References
- 🇪🇺 ENISA EUVD: EUVD-2022-49188
Vulnerability details
An out-of-bounds read vulnerability exists in the PORT command parameter extraction functionality of Weston Embedded uC-FTPs v 1.98.00. A specially-crafted set of network packets can lead to denial of service. An attacker can send packets to trigger this vulnerability.This vulnerability…
more
occurs when no IP address argument is provided to the `PORT` command.
- CWE(s)
Related Threats
No named actor attribution yet. ATT&CK technique mapping in progress for this CVE.
Affected Assets
Mitigating Controls
No mitigating controls mapped yet. The per-CVE control annotator has not reached this CVE.