CVE-2019-17320: Netsarang Xftp

Critical severity, CVSS 9.8. EPSS: 2.2% chance of exploitation in the next 30 days.

NetSarang XFTP Client 6.0149 and earlier version contains a buffer overflow vulnerability caused by improper boundary checks when copying file name from an attacker controlled FTP server. That leads attacker to execute arbitrary code by sending a crafted filename.

Affected products

• Netsarang Xftp: up to and including 6.0149

Published 2019-10-10. Last modified 2026-06-17.