CVE-2018-7573
50Vexday Risk Score
Patch soon. It has a working public exploit.
ssvc Attendepss 70%
from disclosure to weapon68 days
Published on NVDMar 1
1st PoC+68d
metasploitMar 4
exploitation probability
70%top 1% of all CVEs
observed exploitation
nono source reports it
4 public exploit(s)
An issue was discovered in FTPShell Client 6.7. A remote FTP server can send 400 characters of 'F' in conjunction with the FTP 220 response code to crash the application; after this overflow, one can run arbitrary code on the victim machine. This is similar to CVE-2009-3364 and CVE-2017-6465.
Affected products
n/a · n/apublic PoCs found — 4✓ VexDay Proof
exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/44596exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/44968cve_referencewww.exploit-db.com/exploits/44596/unverifiedcve_referencewww.exploit-db.com/exploits/44968/unverified⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.