CVE Watch—

CVE-2023-40044

Progress WS_FTP Server Deserialization of Untrusted Data Vulnerability

CVSS

—

Sem CVSS

EPSS

90.4%

p100

KEV

SIM

5 de out. de 2023

Exploit Today

0-100

Publicado: — · Última mod.: —

EPSS · 30d

90.4%EPSS · 30 dias90.4%

2026-10-082026-11-05

Ficha do catálogo KEV

Produto

Progress / WS_FTP Server

Vulnerabilidade

Progress WS_FTP Server Deserialization of Untrusted Data Vulnerability

Adicionado ao KEV

5 de out. de 2023

Corrigir até

26 de out. de 2023

Uso conhecido em ransomware

Sim

Descrição resumida

Progress WS_FTP Server contains a deserialization of untrusted data vulnerability in the Ad Hoc Transfer module that allows an authenticated attacker to execute remote commands on the underlying operating system.

Ação necessária

Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

Notas

https://community.progress.com/s/article/WS-FTP-Server-Critical-Vulnerability-September-2023; https://nvd.nist.gov/vuln/detail/CVE-2023-40044

CVEs relacionados

Nenhum CVE relacionado por CWE ou produto.