CVE-2026-102722

In Eclipse ThreadX NetX Duo versions 6.0 through 6.5.2.202603a, the FTP client in IPv4 passive mode opens its data connection to whatever address the server names in its 227 reply instead of the server it is talking to. A malicious FTP server can make the client connect to any host and port the...

CVE-2026-102722 The FTP client trusts arbitrary IP addresses in the PASV server response

In Eclipse ThreadX NetX Duo versions 6.0 through 6.5.2.202603a, the FTP client in IPv4 passive mode opens its data connection to whatever address the server names in its 227 reply instead of the server it is talking to. A malicious FTP server can make the client connect to any host and port the...

EUVD-2026-89187

In the IPv4 PASV path, the FTP Client accepts whatever address was sent in the server's 227 reply. Validation only covers the parse and the non-zero values, thus a malicious server can name any address and direct the Client there...

CVE-2026-102722 The FTP client trusts arbitrary IP addresses in the PASV server response

In Eclipse ThreadX NetX Duo versions 6.0 through 6.5.2.202603a, the FTP client in IPv4 passive mode opens its data connection to whatever address the server names in its 227 reply instead of the server it is talking to. A malicious FTP server can make the client connect to any host and port the...

CVE-2026-102722

The FTP Client is vulnerable to a flaw in the IPv4 PASV path where it accepts any address provided in the server's 227 reply . Because validation only ensures the address parses correctly and contains non-zero values, a malicious server can specify an arbitrary address to redirect the client. No ...

CVE-2026-102722 The FTP client trusts arbitrary IP addresses in the PASV server response

In Eclipse ThreadX NetX Duo versions 6.0 through 6.5.2.202603a, the FTP client in IPv4 passive mode opens its data connection to whatever address the server names in its 227 reply instead of the server it is talking to. A malicious FTP server can make the client connect to any host and port the...

CVE-2026-102722: Server-Side Request Forgery (SSRF)

In the IPv4 PASV path, the FTP Client accepts whatever address was sent in the server's 227 reply. Validation only covers the parse and the non-zero values, thus a malicious server can name any address and direct the Client there...

Stack overflow

Stack-based buffer overflow in ElectraSoft 32bit FTP 09.04.24 allows remote FTP servers to execute arbitrary code via a long 227 reply to a PASV command...

CVE-2009-1675: Improper Restriction of Operations within the Bounds of a Memory Buffer

Stack-based buffer overflow in ElectraSoft 32bit FTP 09.04.24 allows remote FTP servers to execute arbitrary code via a long 227 reply to a PASV command...