What is CVE-2022-46377?

CVE-2022-46377 is a medium-severity vulnerability in Weston Embedded Uc-Ftps, classified under CWE-823. CVSS score: 6.5/10. Published 2023-05-10.

How severe is CVE-2022-46377?

Medium severity. CVSS v3 base score is 6.5 out of 10.

Out-of-bounds Read in Weston Embedded Uc-Ftps

CVE-2022-46377

An out-of-bounds read vulnerability exists in the PORT command parameter extraction functionality of Weston Embedded uC-FTPs v 1.98.00. A specially-crafted set of network packets can lead to denial of service. An attacker can send packets to trigger this vulnerability.This vulnerability occurs when no IP address argument is provided to the `PORT` command.

EPSS: 0.015 (71.3th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 6.5 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H.

Affected products

Weston Embedded Uc-ftps — versions v 1.98.00
Weston-embedded Uc-ftps — versions 1.98.00

Weakness classification (CWE)

References

talos-cna@cisco.com (Exploit, Third Party Advisory, Mitigation)
talos-cna@cisco.com (Patch)
af854a3a-2127-422b-91ae-364da2661108

Frequently asked questions

What is CVE-2022-46377?: CVE-2022-46377 is a medium-severity vulnerability in Weston Embedded Uc-Ftps, classified under CWE-823. CVSS score: 6.5/10. Published 2023-05-10.
How severe is CVE-2022-46377?: Medium severity. CVSS v3 base score is 6.5 out of 10.