CVE-2017-6465: Ftpshell Client

Critical severity, CVSS 9.8. EPSS: 50.3% chance of exploitation in the next 30 days.

Remote Code Execution was discovered in FTPShell Client 6.53. By default, the client sends a PWD command to the FTP server it is connecting to; however, it doesn't check the response's length, leading to a buffer overflow situation.

Affected products

• Ftpshell Ftpshell Client: version 6.53 only

Published 2017-03-10. Last modified 2026-06-17.