CVE-2022-38125CWE-923

FTP Agent forwards traffic on inactive ports to LinkManager

Low · published April 19, 2023

CVSS v3.1
2.9
EPSS
0%
Percentile
4.5
In the wild
Unconfirmed
What it is

Improper Restriction of Communication Channel to Intended Endpoints vulnerability in Secomea SiteManager (FTP Agent modules) allows Exploiting Trust in Client.

The record
Technical detail
CVSS v3.1
2.9 · LOW
Vector
CVSS:3.1/AV:A/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00157 · 4.5th percentile
Weakness
CWE-923 · Improper Restriction of Communication Channel to Intended Endpoints
Published
2023-04-19T11:58Z
EPSS history
Timeline
  • 19 APR 11:58Z
    FTP Agent forwards traffic on inactive ports to LinkManager
    cvelistv5