← Database

CVE-2022-46378

MEDIUM CVSS: 6.5 Published: 2023-05-10 Modified: 2026-06-17

Description

An out-of-bounds read vulnerability exists in the PORT command parameter extraction functionality of Weston Embedded uC-FTPs v 1.98.00. A specially-crafted set of network packets can lead to denial of service. An attacker can send packets to trigger this vulnerability.This vulnerability occurs when no port argument is provided to the `PORT` command.

Affected Platforms

Weston-Embedded Uc-Ftps

Weakness Type

CWE-823, CWE-125

References