CVE-2009-4646

2022-10-0316:24:04

mitre

www.cve.org

accellion

secure file transfer

code injection

snmp

remote authentication

7 High

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

60.9%

JSON

Static code injection vulnerability in the administrative web interface in Accellion Secure File Transfer Appliance allows remote authenticated administrators to inject arbitrary shell commands by appending them to a request to update the SNMP public community string.

References

secunia.com/advisories/38538

www.portcullis-security.com/339.php