Lucene search

CVE-2023-40044

🗓️ 27 Sep 2023 15:57:18Reported by ProgressSoftwareType

cve🔗 web.nvd.nist.gov👁 312 Views🌐 36 Media mentions

CVE-2023-40044: .NET deserialization vulnerability in WS_FTP Serve

Reporter	Title	Published	Views	Family All 16
NVD	CVE-2023-40044	27 Sep 202315:18	–	nvd
0day.today	Progress Software WS_FTP Unauthenticated Remote Code Execution Exploit	4 Oct 202300:00	–	zdt
Cvelist	CVE-2023-40044 WS_FTP Server Ad Hoc Transfer Module .NET Deserialization Vulnerability	27 Sep 202314:48	–	cvelist
Packet Storm	Progress Software WS_FTP Unauthenticated Remote Code Execution	4 Oct 202300:00	–	packetstorm
GithubExploit	Exploit for Deserialization of Untrusted Data in Progress Ws Ftp Server	2 Oct 202314:55	–	githubexploit
Prion	Deserialization of untrusted data	27 Sep 202315:18	–	prion
Metasploit	Progress Software WS_FTP Unauthenticated Remote Code Execution	2 Oct 202310:42	–	metasploit
Talos Blog	Is it bad to have a major security incident on your résumé? (Seriously I don’t know)	5 Oct 202318:00	–	talosblog
AttackerKB	CVE-2023-40044	27 Sep 202300:00	–	attackerkb
CISA KEV Catalog	Progress WS_FTP Server Deserialization of Untrusted Data Vulnerability	5 Oct 202300:00	–	cisa_kev

Nvd

Node

progress ws_ftp_serverRange<8.7.4

progress ws_ftp_serverRange8.8–8.8.2

[
  {
    "defaultStatus": "affected",
    "modules": [
      "Ad Hoc Transfer Module"
    ],
    "product": "WS_FTP Server",
    "vendor": "Progress Software Corporation",
    "versions": [
      {
        "lessThan": "8.8.2",
        "status": "affected",
        "version": "8.8.0",
        "versionType": "semver"
      },
      {
        "lessThan": "8.7.4",
        "status": "affected",
        "version": "8.7.0",
        "versionType": "semver"
      }
    ]
  }
]

Source	Link
theregister	www.theregister.com/2023/10/02/ws_ftp_update/
community	www.community.progress.com/s/article/WS-FTP-Server-Critical-Vulnerability-September-2023
censys	www.censys.com/cve-2023-40044/
attackerkb	www.attackerkb.com/topics/bn32f9sNax/cve-2023-40044
progress	www.progress.com/ws_ftp
rapid7	www.rapid7.com/blog/post/2023/09/29/etr-critical-vulnerabilities-in-ws_ftp-server/
packetstormsecurity	www.packetstormsecurity.com/files/174917/Progress-Software-WS_FTP-Unauthenticated-Remote-Code-Execution.html
assetnote	www.assetnote.io/resources/research/rce-in-progress-ws-ftp-ad-hoc-via-iis-http-modules-cve-2023-40044

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

27 Sep 2023 15:18Current

9.1High risk

Vulners AI Score9.1

CVSS38.8

EPSS0.865