CVE-2022-22899

MediumCVSS 5.5

Published: 17/02/2022(UTC)Updated: 09/07/2026(UTC)Translated: 10/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Elevated risk

0.86%

54th percentile - higher than 54% of all known CVEs

Summary

Core FTP/SFTP Server v2 Build 725 was found to allow unauthenticated attackers to cause a Denial of Service (DoS) via a crafted packet sent through the SSH service.

Risk Assessment

An attacker can remotely and without authentication crash the FTP/SFTP server, leading to file access disruption and organizational downtime.

Recommendation

Immediately update Core FTP/SFTP Server to the latest patched version or apply temporary firewall rules to block malicious SSH packets.

Original NVD description (English source)

Core FTP / SFTP Server v2 Build 725 was discovered to allow unauthenticated attackers to cause a Denial of Service (DoS) via a crafted packet through the SSH service.