Vulnerability Details CVE-2023-40044
In WS_FTP Server versions prior to 8.7.4 and 8.8.2, a pre-authenticated attacker could leverage a .NET deserialization vulnerability in the Ad Hoc Transfer module to execute remote commands on the underlying WS_FTP Server operating system.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.944
EPSS Ranking 100.0%
CVSS Severity
CVSS v3 Score 10.0
Proposed Action
Progress WS_FTP Server contains a deserialization of untrusted data vulnerability in the Ad Hoc Transfer module that allows an authenticated attacker to execute remote commands on the underlying operating system.
Ransomware Campaign
Known
Products affected by CVE-2023-40044
-
cpe:2.3:a:progress:ws_ftp_server:-
-
cpe:2.3:a:progress:ws_ftp_server:1.0.1
-
cpe:2.3:a:progress:ws_ftp_server:1.0.1.e
-
cpe:2.3:a:progress:ws_ftp_server:1.0.2
-
cpe:2.3:a:progress:ws_ftp_server:1.0.2.e
-
cpe:2.3:a:progress:ws_ftp_server:1.0.3
-
cpe:2.3:a:progress:ws_ftp_server:1.0.4
-
cpe:2.3:a:progress:ws_ftp_server:1.0.5
-
cpe:2.3:a:progress:ws_ftp_server:2.0
-
cpe:2.3:a:progress:ws_ftp_server:2.0.1
-
cpe:2.3:a:progress:ws_ftp_server:2.0.2
-
cpe:2.3:a:progress:ws_ftp_server:2.0.3
-
cpe:2.3:a:progress:ws_ftp_server:2.0.4
-
cpe:2.3:a:progress:ws_ftp_server:3.0
-
cpe:2.3:a:progress:ws_ftp_server:3.1
-
cpe:2.3:a:progress:ws_ftp_server:3.1.1
-
cpe:2.3:a:progress:ws_ftp_server:3.1.2
-
cpe:2.3:a:progress:ws_ftp_server:3.1.3
-
cpe:2.3:a:progress:ws_ftp_server:3.4
-
cpe:2.3:a:progress:ws_ftp_server:4.0
-
cpe:2.3:a:progress:ws_ftp_server:4.0.1
-
cpe:2.3:a:progress:ws_ftp_server:4.0.2
-
cpe:2.3:a:progress:ws_ftp_server:5.0.2
-
cpe:2.3:a:progress:ws_ftp_server:5.0.3
-
cpe:2.3:a:progress:ws_ftp_server:5.0.4
-
cpe:2.3:a:progress:ws_ftp_server:5.0.5
-
cpe:2.3:a:progress:ws_ftp_server:5.0.8
-
cpe:2.3:a:progress:ws_ftp_server:6.1.0.0
-
cpe:2.3:a:progress:ws_ftp_server:6.1.1
-
cpe:2.3:a:progress:ws_ftp_server:7.0
-
cpe:2.3:a:progress:ws_ftp_server:7.1
-
cpe:2.3:a:progress:ws_ftp_server:7.5
-
cpe:2.3:a:progress:ws_ftp_server:7.5.1
-
cpe:2.3:a:progress:ws_ftp_server:7.6
-
cpe:2.3:a:progress:ws_ftp_server:7.6.2
-
cpe:2.3:a:progress:ws_ftp_server:7.6.2.1
-
cpe:2.3:a:progress:ws_ftp_server:7.6.3
-
cpe:2.3:a:progress:ws_ftp_server:7.7
-
cpe:2.3:a:progress:ws_ftp_server:8.0
-
cpe:2.3:a:progress:ws_ftp_server:8.0.1
-
cpe:2.3:a:progress:ws_ftp_server:8.0.2
-
cpe:2.3:a:progress:ws_ftp_server:8.5
-
cpe:2.3:a:progress:ws_ftp_server:8.5.4
-
cpe:2.3:a:progress:ws_ftp_server:8.6
-
cpe:2.3:a:progress:ws_ftp_server:8.6.0
-
cpe:2.3:a:progress:ws_ftp_server:8.6.1
-
cpe:2.3:a:progress:ws_ftp_server:8.7
-
cpe:2.3:a:progress:ws_ftp_server:8.7.1
-
cpe:2.3:a:progress:ws_ftp_server:8.7.2
-
cpe:2.3:a:progress:ws_ftp_server:8.7.3
-
cpe:2.3:a:progress:ws_ftp_server:8.8
-
cpe:2.3:a:progress:ws_ftp_server:8.8.0
-
cpe:2.3:a:progress:ws_ftp_server:8.8.1