Surgeftp

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2017-17933 MEDIUM POC This Month

cgi/surgeftpmgr.cgi (aka the Web Manager interface on TCP port 7021 or 9021) in NetWin SurgeFTP version 23f2 has XSS via the classid, domainid, or username parameter. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

XSS Surgeftp

NVD

CVSS 3.1

6.1

EPSS

0.2%

CVE-2013-4742 HIGH This Week

Buffer overflow in NetWin SurgeFTP before 23d2 allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a long string within the authentication request. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Buffer Overflow Denial Of Service RCE Surgeftp

NVD

CVSS 2.0

7.5

EPSS

3.7%

CVE-2017-17933

EPSS 0% CVSS 6.1

MEDIUM POC This Month

XSS Surgeftp

NVD

CVE-2013-4742

EPSS 4% CVSS 7.5

HIGH This Week

Buffer Overflow Denial Of Service RCE +1

NVD