CVE-2022-46378: Weston-Embedded Uc-Ftps

High severity, CVSS 7.5. EPSS: 1.4% chance of exploitation in the next 30 days.

An out-of-bounds read vulnerability exists in the PORT command parameter extraction functionality of Weston Embedded uC-FTPs v 1.98.00. A specially-crafted set of network packets can lead to denial of service. An attacker can send packets to trigger this vulnerability.This vulnerability occurs when no port argument is provided to the `PORT` command.

Affected products

Published 2023-05-10. Last modified 2026-06-17.