{"id":"CVE-2021-47791","aliases":["EUVD-2026-3002","GHSA-rx63-hxw9-f88f"],"status":"published","title":"SmartFTP Client 10.0.2909.0 - 'Multiple' Denial of Service","description":"SmartFTP Client 10.0.2909.0 contains multiple denial of service vulnerabilities that allow attackers to crash the application through specific input manipulation. Attackers can trigger crashes by entering malformed paths, using invalid IP addresses, or clearing connection history in the client's interface.","severity":{"version":"4.0","score":4.6,"vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-12","score":0.00518,"percentile":0.44535,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-770"],"published":"2026-01-15T23:25:41Z","modified":"2026-06-17T04:18:30Z","products":[{"vendor":"smartftp","product":"smartftp"},{"vendor":"smartftp","product":"smartftp client"}],"references":[{"url":"https://www.exploit-db.com/exploits/50266","tags":["exploit","Exploit"]},{"url":"https://www.smartftp.com/en-us/","tags":["product","Product"]},{"url":"https://www.smartftp.com/en-us/download","tags":["product","Product"]},{"url":"https://www.vulncheck.com/advisories/smartftp-client-multiple-denial-of-service","tags":["third-party-advisory","Third Party Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-47791"},{"url":"https://www.smartftp.com/en-us"},{"url":"https://github.com/advisories/GHSA-rx63-hxw9-f88f"}],"sources":{"cve":[{"id":"CVE-2021-47791","title":"SmartFTP Client 10.0.2909.0 - 'Multiple' Denial of Service","description":"SmartFTP Client 10.0.2909.0 contains multiple denial of service vulnerabilities that allow attackers to crash the application through specific input manipulation. Attackers can trigger crashes by entering malformed paths, using invalid IP addresses, or clearing connection history in the client's interface.","status":"published","published":"2026-01-15T23:25:41.916Z","modified":"2026-01-16T21:12:08.424Z","cvss":[{"version":"4.0","score":4.6,"vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N","level":"medium","assessor":"cna"},{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"cna"}],"cwes":["CWE-770"],"updated_at":"2026-11-02T14:32:56.308189Z"}],"euvd":[{"id":"EUVD-2026-3002","description":"SmartFTP Client 10.0.2909.0 contains multiple denial of service vulnerabilities that allow attackers to crash the application through specific input manipulation. Attackers can trigger crashes by entering malformed paths, using invalid IP addresses, or clearing connection history in the client's interface.","status":"published","published":"2026-01-15T23:25:41Z","modified":"2026-01-16T21:12:08Z","cvss":[{"version":"4.0","score":4.6,"vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N","level":"medium"}],"updated_at":"2026-11-02T19:48:50.374471Z"}],"ghsa":[{"id":"GHSA-rx63-hxw9-f88f","title":"SmartFTP Client 10.0.2909.0 contains multiple denial of service vulnerabilities that allow...","description":"SmartFTP Client 10.0.2909.0 contains multiple denial of service vulnerabilities that allow attackers to crash the application through specific input manipulation. Attackers can trigger crashes by entering malformed paths, using invalid IP addresses, or clearing connection history in the client's interface.","status":"published","published":"2026-01-16T00:30:55Z","modified":"2026-01-16T00:31:02Z","cvss":[{"version":"4.0","score":4.6,"vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","level":"medium"},{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"cwes":["CWE-770"],"updated_at":"2026-11-02T15:05:38.149378Z"}],"nvd":[{"id":"CVE-2021-47791","description":"SmartFTP Client 10.0.2909.0 contains multiple denial of service vulnerabilities that allow attackers to crash the application through specific input manipulation. Attackers can trigger crashes by entering malformed paths, using invalid IP addresses, or clearing connection history in the client's interface.","status":"published","published":"2026-01-16T00:16:22.827Z","modified":"2026-06-17T04:18:30Z","cvss":[{"version":"4.0","score":4.6,"vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","level":"medium","assessor":"secondary"},{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"secondary"}],"cwes":["CWE-770"],"updated_at":"2026-11-02T14:07:09.005706Z"}]}}