Format string vulnerability in HD Soft Windows FTP Server 1.6 and earlier allows remote attackers to execute arbitrary code via format string specifiers in the username, which is processed by the wscanf function.
Product
hd soft windows ftp server vulnerabilities
1 published CVE affecting hd soft windows ftp server, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).
- Total
- 1
- Critical
- 0
- High
- 1
- Medium
- 0
- Low
- 0
- Unscored
- 0
- CISA KEV
- 0
Latest hd soft windows ftp server CVEs
Newest publication first
-
HighCVSS 7.5 EPSS 9.8% Public exploit
Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.