CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2023-09-27
Progress WS_FTP Server Ad Hoc Transfer Module .NET Deserialization Remote Code Execution (RCE) - CVE-2023-40044
[Affected Scope] Progress WS_FTP Server versions prior to 8.7.4 and 8.8.2 with Ad Hoc Transfer module enabled
[Impact] A pre-authenticated remote attacker can execute arbitrary OS commands with IIS worker process privileges by sending a crafted .NET serialized payload
[Mitigation] Immediately upgrade to patched versions (8.7.4, 8.8.2, or higher) or disable/remove the Ad Hoc Transfer module