CVE-2021-47791

Published: Jan 16, 2026Modified: Jun 17, 2026

4.6

Vector

CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Show more

CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:XShow less

Source: disclosure@vulncheck.com (Secondary)

Description

SmartFTP Client 10.0.2909.0 contains multiple denial of service vulnerabilities that allow attackers to crash the application through specific input manipulation. Attackers can trigger crashes by entering malformed paths, using invalid IP addresses, or clearing connection history in the client's interface.

Affected (1)

Products: Smartftp: Smartftp

1 product

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Smartftp Smartftp	Version 10.0.2909.0

Related CWEs

Allocation of Resources Without Limits or Throttling

The product allocates a reusable resource or group of resources on behalf of an actor without imposing any restrictions on the size or number of resources that can be allocated, in violation of the intended security policy for that actor.

References (5)

https://www.exploit-db.com/exploits/50266

Source: disclosure@vulncheck.com

Exploit

https://www.smartftp.com/en-us/

Source: disclosure@vulncheck.com

Product

https://www.smartftp.com/en-us/download

Source: disclosure@vulncheck.com

Product

https://www.vulncheck.com/advisories/smartftp-client-multiple-denial-of-service

Source: disclosure@vulncheck.com

Third Party Advisory

https://www.exploit-db.com/exploits/50266

Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0

Exploit

Timeline

No history available yet.