CVE-2022-27963

Description

Xftp 7.0.0088p and below contains a binary hijack vulnerability which allows attackers to execute arbitrary code via a crafted .exe file.

Affected Platforms

Weakness Type

CWE-428

References

• https://github.com/ycdxsb/Vuln/tree/main/NetSarang-CreateProcessW-Misuse-Binary-…
• https://www.netsarang.com/en/xftp-update-history/
• https://github.com/ycdxsb/Vuln/tree/main/NetSarang-CreateProcessW-Misuse-Binary-…
• https://www.netsarang.com/en/xftp-update-history/