Vulnerability · Published Dec 22, 2025 · Assigned by VulnCheck
CVE-2022-50687Cobian Backup 11 Gravity 11.2.0.582 Local Denial of Service via Password Field
Medium 5.5
In plain English
A medium-severity buffer overflow in Cobian Backup Gravity from Cobiansoft. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 13% of all known vulnerabilities).
Severity (CVSS 3.1)5.5Medium
Exploit odds (30 days)0.2%top 87.5% of all CVEs
Exploited in the wildNo reportsCISA SSVC: poc
Attack toolingNoneno public tooling known
Official description
Cobian Backup 11 Gravity 11.2.0.582 contains a denial of service vulnerability in the FTP password input field that allows attackers to crash the application. Attackers can generate a specially crafted 800-byte buffer and paste it into the password field to trigger an application crash.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Cobiansoft | Cobian Backup Gravity | 11.2.0.582 |
Weakness: CWE-120 · Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H