CVE-2021-47791
SmartFTP Client 10.0.2909.0 - 'Multiple' Denial of Service
- State
- Published
- Severity
- 4.6 Medium
- Published
- Jan 15, 2026
- Updated
- Jan 16, 2026
- Reserved
- Jan 14, 2026
Description
SmartFTP Client 10.0.2909.0 contains multiple denial of service vulnerabilities that allow attackers to crash the application through specific input manipulation. Attackers can trigger crashes by entering malformed paths, using invalid IP addresses, or clearing connection history in the client's interface.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 4.0 | 4.6 Medium | CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N | VulnCheck |
| 3.1 | 7.5 High | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H | VulnCheck |
Weaknesses
- CWE-770 Allocation of Resources Without Limits or Throttling
Affected Products
| Product | Versions |
|---|---|
SmartFTP ClientSmartftp |
|
References
- ExploitDB-50266exploit
- SmartFTP Official Homepageproduct
- SmartFTP Download Pageproduct
- VulnCheck Advisory: SmartFTP Client 10.0.2909.0 - 'Multiple' Denial of Servicethird-party-advisory
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.