CVE-2024-1190

LOW

Global Scape CuteFTP 9.3.0.3 - Denial of Service via Host/Username/Password Argument Manipulation

Title source: llm
STIX 2.1

Description

A vulnerability was found in Global Scape CuteFTP 9.3.0.3 and classified as problematic. Affected by this issue is some unknown functionality. The manipulation of the argument Host/Username/Password leads to denial of service. The attack needs to be approached locally. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-252680. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.

References (3)

Core 3
Core References
Permissions Required, Third Party Advisory vdb-entry technical-description
https://vuldb.com/?id.252680
Permissions Required, Third Party Advisory signature permissions-required
https://vuldb.com/?ctiid.252680

Scores

CVSS v3 3.3
EPSS 0.0030
EPSS Percentile 21.7%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

CISA SSVC

Vulnrichment
Exploitation poc
Automatable no
Technical Impact partial

Details

CWE
CWE-404
Status published
Products (1)
globalscape/cuteftp 9.3.0.3
Published Feb 02, 2024
Tracked Since Feb 18, 2026