Is CVE-2014-0603 actively exploited?

No active exploitation of CVE-2014-0603 has been confirmed so far. Continue monitoring, as exploit status can change.

Can CVE-2014-0603 be exploited remotely?

Yes. CVE-2014-0603 is exploitable remotely over the network (CVSS attack vector: Network).

What is the CVSS score of CVE-2014-0603?

CVE-2014-0603 has a CVSS score of 10.0 (CRITICAL).

HOME VULNERABILITIESCVE-2014-0603

CRITICAL

CVE-2014-0603

CWE-94Published: February 6, 2015· Updated: Jun 17, 2026

10.0

CVSS v3.1

Official Description

The rftpcom.dll ActiveX control in Attachmate Reflection FTP Client before 14.1.429 allows remote attackers to cause a denial of service (memory corruption) and execute arbitrary code via vectors related to the (1) GetGlobalSettings or (2) GetSiteProperties3 methods, which triggers a dereference of an arbitrary memory address. NOTE: this issue was MERGED with CVE-2014-0606 because it is the same type of vulnerability, affecting the same set of versions, and discovered by the same researcher.

NVD Source

Technical Analysis

CVE-2014-0603 can be exploited remotely over the network without requiring physical or adjacent access, significantly expanding the attack surface for threat actors.

Exploitation requires some privileges, which limits the exposure to scenarios where an attacker has already gained initial access.