CVE-2018-20658

PoC —

CVSS 3.0

7.5 high

EPSS

8%p95

Published

Jan 2, 2019 (Jan 2, 2019)

Modified

Jun 17, 2026

Description

The server in Core FTP 2.0 build 653 on 32-bit platforms allows remote attackers to cause a denial of service (daemon crash) via a crafted XRMD command.

Vendors: coreftp
Products: core ftp
Weakness: CWE-20
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

NVD CVE.org GitHub PoCs EPSS (8.5%)

In the news0 stories

No ingested article mentions this CVE yet.