VulnerabilityAnalyzed

CVE-2021-47791

SmartFTP Client 10.0.2909.0 contains multiple denial of service vulnerabilities that allow attackers to crash the application through specific input manipulation.

MEDIUM 4.6EPSS 0.53%

Does this matter?

Lower severity and a low EPSS score (0.53%). Track it; it rarely justifies an emergency change on its own.

Description

SmartFTP Client 10.0.2909.0 contains multiple denial of service vulnerabilities that allow attackers to crash the application through specific input manipulation. Attackers can trigger crashes by entering malformed paths, using invalid IP addresses, or clearing connection history in the client's interface.

CVSS 4.0: 4.6 MEDIUMCVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/M
EPSS: 0.53% probability · 43th percentile
CISA KEV: Not listed
Weakness: CWE-770
Affected: smartftp/smartftp
Source: disclosure@vulncheck.com

References

https://www.exploit-db.com/exploits/50266Exploit
https://www.smartftp.com/en-us/Product
https://www.smartftp.com/en-us/downloadProduct
https://www.vulncheck.com/advisories/smartftp-client-multiple-denial-of-serviceThird Party Advisory
https://www.exploit-db.com/exploits/50266Exploit

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.