CVE-2023-40044

Producto

Progress / WS_FTP Server

Vulnerabilidad

Progress WS_FTP Server Deserialization of Untrusted Data Vulnerability

Añadido a KEV

5 oct 2023

Remediar antes de

26 oct 2023

Uso conocido en ransomware

Sí

Descripción resumida

Progress WS_FTP Server contains a deserialization of untrusted data vulnerability in the Ad Hoc Transfer module that allows an authenticated attacker to execute remote commands on the underlying operating system.

Acción requerida

Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

Notas

https://community.progress.com/s/article/WS-FTP-Server-Critical-Vulnerability-September-2023; https://nvd.nist.gov/vuln/detail/CVE-2023-40044