Path Traversal in Attachmate Reflection Ftp Client

CVE-2014-0605

Directory traversal vulnerability in the rftpcom.dll ActiveX control in Attachmate Reflection FTP Client before 14.1.429 allows remote attackers to execute arbitrary code via unspecified vectors to the SaveSettings method.

Vulnerability class: Path Traversal (Directory Traversal)

EPSS: 0.077 (94.0th percentile) — read the EPSS interpretation.

Affected products

Attachmate Reflection_ftp_client
N/a — versions n/a

Weakness classification (CWE)

CWE-22 — Path Traversal

References

cve@mitre.org (x_refsource_CONFIRM, Vendor Advisory)
cve@mitre.org (x_refsource_MISC)