CVE-2014-0605 Directory traversal vulnerability in the rftpcom.dll ActiveX control in Attachmate Reflection FTP Client before 14.1.429 allows remote attackers to execute arbitrary code via unspecified vectors to th...

HighCVSS 10.0 EPSS 7.7%

Published: 2015-02-06 13:00
Updated: 2026-06-17 03:03
Exploit status: No public exploit known

Description

Directory traversal vulnerability in the rftpcom.dll ActiveX control in Attachmate Reflection FTP Client before 14.1.429 allows remote attackers to execute arbitrary code via unspecified vectors to the SaveSettings method.

Affected products

Product	Affected versions	Fixed in
attachmate reflection ftp client	<= 14.1.420	No fix listed

References

support.attachmate.com vendor-advisory
www.zerodayinitiative.com

CVSS v2.0

10.0 High

AV:N/AC:L/Au:N/C:C/I:C/A:C

Access Vector: Network
Access Complexity: Low
Authentication: None
Confidentiality: Complete
Integrity: Complete
Availability: Complete

Weakness & likelihood

EPSS (exploitation probability, 30 days): 7.74% (percentile 94.7)
CWE: CWE-22

Public exploit references

Metadata only. CVERadar never hosts or runs exploit code.

No public exploit references known.