Vendors / NetSarang Computer, Inc. Records 2 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 2 CVSS 9.0–10.0
CVSS high 0 CVSS 7.0–8.9
Exploited now NetSarang Computer, Inc. records in CISA KEV No NetSarang Computer, Inc. vulnerabilities are listed in CISA KEV.
Priority HIGH 81
Xftp FTP Client version up to and including 3.0 (build 0238) contain a stack-based buffer overflow vulnerability triggered by a maliciously crafted PWD response from an FTP server.
CVSS 4.0 CRITICAL 9.3· Network · No auth · No interaction · EPSS 0.01465 · Published 2025-08-21 · No fix listed CWE-121
Priority MEDIUM 49
NetSarang Xmanager Enterprise 5.0 Build 1232, Xmanager 5.0 Build 1045, Xshell 5.0 Build 1322, Xftp 5.0 Build 1218, and Xlpd 5.0 Build 1220 contain a malicious nssock2.dll that implements a multi-stage, DNS-based backdoor…
CVSS 4.0 CRITICAL 9.3· Network · No auth · User interaction · EPSS 0.00667 · Published 2025-10-09 · No fix listed CWE-506
Open these records in search → All records by CVSS severity
Critical2 High0 Medium0 Low0 No CVSS0