Lucene search

AttackerKBAKB:806300A4-6445-4223-B146-99CA98323D05

HistoryOct 02, 2023 - 12:00 a.m.

CVE-2023-40044

2023-10-0200:00:00

attackerkb.com

ws_ftp server

.net deserialization

ad hoc transfer

remote commands

vulnerability

attacker value

exploitability rating

unauthenticated attacker

http(s) post request

8.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

6.5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:P/I:P/A:P

0.473 Medium

EPSS

Percentile

97.1%

JSON

In WS_FTP Server versions prior to 8.7.4 and 8.8.2, a pre-authenticated attacker could leverage a .NET deserialization vulnerability in the Ad Hoc Transfer module to execute remote commands on the underlying WS_FTP Server operating system.

Recent assessments:

sfewer-r7 at October 02, 2023 8:11am UTC reported:

Based on our Rapid7 Analysis, the attacker value for this vulnerability is very high due to the target software being a file transfer solution. The exploitability rating for this vulnerability is also very high as it is trivially exploitable with a single HTTP(S) POST request by an unauthenticated attacker.

Assessed Attacker Value: 5
Assessed Attacker Value: 5Assessed Attacker Value: 5