CVE-2024-23985
Published: 25 January 2024
Summary
CVE-2024-23985 is a high-severity an unspecified weakness vulnerability in Ezhometech Ezserver. Its CVSS base score is 7.5 (High).
Operationally, ranked in the top 3.0% of CVEs by exploit likelihood; it is not currently listed in the CISA KEV catalog; a public proof-of-concept is referenced.
Deeper analysis
EzServer version 6.4.017 contains a denial-of-service vulnerability that allows an unauthenticated remote attacker to crash the FTP daemon by supplying an excessively long argument to commands such as RNTO. The flaw is reflected in a CVSS 3.1 base score of 7.5 with a network attack vector, low complexity, and no required privileges or user interaction, resulting in high availability impact while leaving confidentiality and integrity unaffected.
An attacker can exploit the issue simply by establishing a TCP connection to the server and issuing a single oversized command; the daemon terminates immediately, interrupting service for all users until it is restarted. Public proof-of-concept code demonstrating the crash has been published on Packet Storm.
The associated EPSS score stands at 0.3281 with no material increase since disclosure, and no vendor advisory or patch information is referenced in the available sources.
EU & UK References
- 🇪🇺 ENISA EUVD: EUVD-2024-21411
Vulnerability details
EzServer 6.4.017 allows a denial of service (daemon crash) via a long string, such as one for the RNTO command.
- CWE(s)
Related Threats
No named actor attribution yet. ATT&CK technique mapping in progress for this CVE.
Affected Assets
Mitigating Controls
No mitigating controls mapped yet. The per-CVE control annotator has not reached this CVE.