Summary
generated automatically from NVD dataThe Windows NT FTP server WFTP has an authentication weakness when the guest account is enabled without a password. In that configuration, an attacker can log into the FTP server with any username and password, with no valid credentials required. The flaw is network-reachable and rated 10.0 (HIGH) under CVSS v2.0, with complete impact on confidentiality, integrity and availability.
NVD description
Windows NT FTP server (WFTP) with the guest account enabled without a password allows an attacker to log into the FTP server using any username and password.
EPSS · FIRST.org
1.6%probability of exploitation in the next 30 days
Higher than 75% of scored CVEs
EPSS (Exploit Prediction Scoring System) estimates, from observed exploitation activity, how likely a CVE is to be exploited in the next 30 days. It complements CVSS, which measures severity, not likelihood. Score of 2026-10-30, recomputed daily by FIRST.org.
CVSS v2.0 Score
Information
- Published
- 1 janv. 1999
- Updated
- 16 juin 2026
- Status
- Modified
- Source
- cve@mitre.org
Weaknesses (CWE)
Know which CVEs hit the versions you run.
Add the product and its version: cveo.tech lists the CVEs that affect it right away, then alerts you by email when a new one affects it — including before NVD has finished its analysis. Free, an account is all it takes.