CVE-2018-12113

moderate-risk
Published 2018-07-05

Core FTP LE version 2.2 Build 1921 is prone to a buffer overflow vulnerability that may result in a DoS or remote code execution via a PASV response.

Do I need to act?

!
12.2% chance of exploitation in next 30 days
EPSS score — higher than 88% of all CVEs
-
Not on CISA KEV list
No confirmed active exploitation reported to CISA
?
Patch status unknown
Check vendor advisories for fix availability and mitigation guidance
9
CVSS 9.8/10 Critical
NETWORK / LOW complexity

Affected Products (1)

Affected Vendors

Coreftp

References (6)

Exploit http://packetstormsecurity.com/files/148383/Core-FTP-LE-2.2-Buffer-Overflow.html
Exploit https://gist.github.com/berkgoksel/a654c8cb661c7a27a3f763dee92016aa
Exploit https://gist.github.com/berkgoksel/e97b3f3b15e2f8293f649d4ebe6a6fc9
Exploit http://packetstormsecurity.com/files/148383/Core-FTP-LE-2.2-Buffer-Overflow.html
Exploit https://gist.github.com/berkgoksel/a654c8cb661c7a27a3f763dee92016aa
Exploit https://gist.github.com/berkgoksel/e97b3f3b15e2f8293f649d4ebe6a6fc9
49
/ 100
moderate-risk
Severity 32/34 · Critical
Exploitability 12/34 · Low
Exposure 5/34 · Minimal