An authentication bypass vulnerability exists in the Authentication functionality of Weston Embedded uC-FTPs v 1.98.00. A specially crafted set of network packets can lead to authentication bypass and denial of service. An attacker can send a sequence of unauthenticated packets to trigger this vulnerability.
The requirements for the product dictate the use of an established authentication algorithm, but the implementation of the algorithm is incorrect.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Uc-ftps | Weston-embedded | 1.98.00 (including) | 1.98.00 (including) |