CVE-2022-46378
Published: 10 May 2023
Summary
CVE-2022-46378 is a medium-severity Use of Out-of-range Pointer Offset (CWE-823) vulnerability in Weston-Embedded Uc-Ftps. Its CVSS base score is 6.5 (Medium).
Operationally, ranked in the top 25.3% of CVEs by exploit likelihood; it is not currently listed in the CISA KEV catalog; a public proof-of-concept is referenced.
EU & UK References
- 🇪🇺 ENISA EUVD: EUVD-2022-49189
Vulnerability details
An out-of-bounds read vulnerability exists in the PORT command parameter extraction functionality of Weston Embedded uC-FTPs v 1.98.00. A specially-crafted set of network packets can lead to denial of service. An attacker can send packets to trigger this vulnerability.This vulnerability…
more
occurs when no port argument is provided to the `PORT` command.
- CWE(s)
Related Threats
No named actor attribution yet. ATT&CK technique mapping in progress for this CVE.
Affected Assets
Mitigating Controls
No mitigating controls mapped yet. The per-CVE control annotator has not reached this CVE.