← All advisories

Medium severity6.5NVD Advisory· Published Mar 31, 2022· Updated Jun 17, 2026

CVE-2022-27963

CVE-2022-27963

Description

Xftp 7.0.0088p and below contains a binary hijack vulnerability which allows attackers to execute arbitrary code via a crafted .exe file.

Affected products

2

Xftp/Xftpcpe-rescue
Netsarang/Xftpllm-create
Range: <=7.0.0088p

Patches

Vulnerability mechanics

References

2

github.com/ycdxsb/Vuln/tree/main/NetSarang-CreateProcessW-Misuse-Binary-Hijack/Xftp-CreateProcessW-Misuse-Binary-HijacknvdExploitThird Party Advisory
www.netsarang.com/en/xftp-update-history/nvdVendor Advisory

News mentions

0

No linked articles in our index yet.