CVE-2022-50799CWE-770

Fetch Softworks Fetch FTP Client 5.8.2 Remote CPU Consumption Denial of Service

High · published December 30, 2025

CVSS v4.0
7.1
EPSS
0%
Percentile
34.8
In the wild
Unconfirmed
What it is

⚡ A single long FTP response is all it takes to max out your CPU! With Fetch FTP Client 5.8.2, attackers can send oversized messages and send your application crashing to a halt. 🔥 Think of it like a restaurant where a customer keeps ordering more food than the kitchen can handle. Eventually, the cooks get overwhelmed, and no one gets served — just chaos in the kitchen! In this case, an attacker can trigger 100% CPU consumption, leading to an application crash and service disruption. This could mean downtime for your users and a major headache for your operations team — yikes!

Put simply

Think of it like a restaurant where a customer keeps ordering more food than the kitchen can handle. Eventually, the cooks get overwhelmed, and no one gets served — just chaos in the kitchen! This denial of service vulnerability lies in how Fetch FTP Client 5.8.2 handles unusually large server responses, specifically those exceeding 2K bytes, causing excessive resource consumption.

What to do

In this case, an attacker can trigger 100% CPU consumption, leading to an application crash and service disruption. This could mean downtime for your users and a major headache for your operations team — yikes! To safeguard against this, upgrade Fetch FTP Client to the latest version immediately. Additionally, consider implementing rate limiting on server responses to help mitigate the risk of excessive resource utilization. Make it a priority! You've got this! Addressing this vulnerability will keep your systems running smoothly and securely. 🛡️

The record
Technical detail
CVSS v4.0
7.1 · HIGH
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
EPSS
0.00416 · 34.8th percentile
Weakness
CWE-770 · Allocation of Resources Without Limits or Throttling
Published
2025-12-30T22:41Z
EPSS history
Timeline
  • 30 DEC 22:41Z
    Fetch Softworks Fetch FTP Client 5.8.2 Remote CPU Consumption Denial of Service
    cvelistv5