CyberRota Analysis
This is a critical severity vulnerability with a CVSS score of 9.1. It may lead to a denial-of-service condition.
CVE
CVE-2022-38337
Severity
CRITICAL
CVSS
9.1
EPSS
0.73%
Original NVD Description
When aborting a SFTP connection, MobaXterm before v22.1 sends a hardcoded password to the server. The server treats this as an invalid login attempt which can result in a Denial of Service (DoS) for the user if services like fail2ban are used.
Related CVEs
Other vulnerabilities affecting the same vendor(s)