CVE-2026-102727
2026-09-29
18h17 +00:00
18h17 +00:00
指定 CVE 通知
随时了解指定 CVE 的变更。
CVE 描述
In Eclipse ThreadX NetX Duo versions 6.0 through 6.5.2.202603a, the FTP server accepts the first connection to a passive data port without checking that it comes from the client that requested passive mode. An unauthenticated network attacker who connects to the predictable port first receives the file an authenticated user downloads, or supplies the content of the file the user uploads.
CVE 信息
相关弱点
| 弱点名称 | 来源 | |
|---|---|---|
| Improper Restriction of Communication Channel to Intended Endpoints The product establishes a communication channel to (or from) an endpoint for privileged or protected operations, but it does not properly ensure that it is communicating with the correct endpoint. |
