← All advisories

Medium severity6.5NVD Advisory· Published Mar 31, 2022· Updated Jun 17, 2026

CVE-2022-27963

CVE-2022-27963

Description

Xftp 7.0.0088p and below contains a binary hijack vulnerability which allows attackers to execute arbitrary code via a crafted .exe file.

Affected products

3

Netsarang/Xftp2 versions
cpe:2.3:a:netsarang:xftp:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:netsarang:xftp:*:*:*:*:*:*:*:*range: <7.0.0088p
- (no CPE)range: <=7.0.0088p
Xftp/Xftpcpe-rescue

Patches

Vulnerability mechanics

References

2

github.com/ycdxsb/Vuln/tree/main/NetSarang-CreateProcessW-Misuse-Binary-Hijack/Xftp-CreateProcessW-Misuse-Binary-HijacknvdExploitThird Party Advisory
www.netsarang.com/en/xftp-update-history/nvdVendor Advisory

News mentions

0

No linked articles in our index yet.