CVE-2022-46378: High severity weston embedded uc-ftps vulnerability

Published May 10, 2023

Updated

An out-of-bounds read vulnerability exists in the PORT command parameter extraction functionality of Weston Embedded uC-FTPs v 1.98.00. A specially-crafted set of network packets can lead to denial of service. An attacker can send packets to trigger this vulnerability.This vulnerability occurs when no port argument is provided to the PORT command.

Affected Software

1 affected component

Weston-embedded Uc-ftps=1.98.00

Remediation

Patch Available

https://github.com/weston-embedded/uC-FTPs/pull/2

Event History

May 10, 2023

CVE Published

via MITRE·03:23 PM

Data Sourced

via MITRE·03:23 PM

DescriptionSeverityWeakness

Data Sourced

via NVD·04:15 PM

RemedyDescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is CVE-2022-46378?

CVE-2022-46378 is an out-of-bounds read vulnerability in the PORT command parameter extraction functionality of Weston Embedded uC-FTPs v 1.98.00.

What is the severity of CVE-2022-46378?

The severity of CVE-2022-46378 is high with a CVSS score of 7.5.

How does CVE-2022-46378 impact the affected software?

CVE-2022-46378 can lead to denial of service due to an out-of-bounds read vulnerability in the PORT command parameter extraction functionality of Weston Embedded uC-FTPs v 1.98.00.

How can an attacker exploit CVE-2022-46378?

An attacker can exploit CVE-2022-46378 by sending specially-crafted network packets to trigger the out-of-bounds read vulnerability in the affected software.

Is there a fix available for CVE-2022-46378?

Yes, a fix is available for CVE-2022-46378. It is recommended to update to a patched version of Weston Embedded uC-FTPs.