Buffer overflow in Konica Minolta FTP Utility 1.0 allows remote attackers to execute arbitrary code via a long CWD command.

1. 2015-08-23 First public exploit (Metasploit exploit/windows/ftp/kmftp_utility_cwd)
2. 2015-10-09 Published

63.21% chance of exploitation in the next 30 days, higher than 99.2% of all scored CVEs (FIRST EPSS, 2026-11-09).

• Metasploit exploit/windows/ftp/kmftp_utility_cwd Konica Minolta FTP Utility 1.00 Post Auth CWD Command SEH Overflow metasploit exploit, normal rank, 2015-08-23
• EDB-39215 Konica Minolta FTP Utility 1.00 - CWD Command Overflow (SEH) remote, 2016-01-11
• EDB-38254 Konica Minolta FTP Utility 1.00 - (Authenticated) CWD Command Overflow (SEH) (Metasploit) remote, 2015-09-21
• packetstormsecurity.com http://packetstormsecurity.com/files/137252/Konica-Minolta-FTP-Utility-1.0-SEH-Buffer-Overflow.html referenced PoC, tagged "exploit" by a source, unverified
• packetstormsecurity.com http://packetstormsecurity.com/files/133621/Konica-Minolta-FTP-Utility-1.00-Post-Auth-CWD-Command-SEH-Overflow.html referenced PoC, tagged "exploit" by a source, unverified

Weakness

• CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer

• exploit-db.com /exploits/39215/

  exploit

• exploit-db.com /exploits/38254/

  exploit

• packetstormsecurity.com /files/137252/Konica-Minolta-FTP-Utility-1.0-SEH-Buffer-Overflow.html

  exploit

• packetstormsecurity.com /files/133621/Konica-Minolta-FTP-Utility-1.00-Post-Auth-CWD-Command-SEH-Overflow.html

  exploit

• rapid7.com /db/modules/exploit/windows/ftp/kmftp_utility_cwd

• CVE List CVE-2015-7768
• NVD CVE-2015-7768

Fencer Intel keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.