9
CVE-2021-41635
- EPSS 1.93%
- Veröffentlicht 24.06.2022 12:15:08
- Zuletzt bearbeitet 21.11.2024 06:26:32
- Quelle cve@mitre.org
- CVE-Watchlists
- Unerledigt
LoginWhen installed as Windows service MELAG FTP Server 2.2.0.4 is run as SYSTEM user, which grants remote attackers to abuse misconfigurations or vulnerabilities with administrative access over the entire host system.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Melag ≫ Ftp Server Version2.2.0.4
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 1.93% | 0.774 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 8.8 | 2.8 | 5.9 |
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
|
| nvd@nist.gov | 9 | 8 | 10 |
AV:N/AC:L/Au:S/C:C/I:C/A:C
|
CWE-276 Incorrect Default Permissions
During installation, installed file permissions are set to allow anyone to modify those files.
https://www.securesystems.de/blog/advisory-and-exploitation-the-melag-ftp-server/