CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Rejetto HTTP File Server (HFS) 2.3m Remote Code Execution (RCE) Vulnerability (CVE-2024-23692) Analysis and Mitigation Guide
[Affected Scope] Rejetto HTTP File Server (HFS) up to and including version 2.3m
[Impact] Unauthenticated remote attackers can execute arbitrary commands on the host system by sending a specially crafted HTTP request
[Mitigation] Immediately discontinue the use of HFS 2.x, migrate to the completely redesigned HFS 3, or restrict network access
Rejetto HTTP File Server (HFS) 2.3x Remote Code Execution (RCE) Vulnerability Analysis and Mitigation Guide (CVE-2014-6287)
[Affected Scope] Rejetto HTTP File Server (HFS) 2.3x versions prior to 2.3c
[Impact] Unauthenticated remote attackers can execute arbitrary system commands and gain full control of the host by sending crafted HTTP requests
[Mitigation] Immediately upgrade to a patched version (2.3c or later) or decommission the legacy HFS service in favor of secure alternatives