Lucene search

CVE-2023-40044

🗓️ 27 Sep 2023 15:57:18Reported by [email protected]Type

WS_FTP deserialization vulnerability pre-authenticated remote command execution

Reporter	Title	Published	Views	Family All 16
0day.today	Progress Software WS_FTP Unauthenticated Remote Code Execution Exploit	4 Oct 202300:00	–	zdt
Cvelist	CVE-2023-40044 WS_FTP Server Ad Hoc Transfer Module .NET Deserialization Vulnerability	27 Sep 202314:48	–	cvelist
Packet Storm	Progress Software WS_FTP Unauthenticated Remote Code Execution	4 Oct 202300:00	–	packetstorm
GithubExploit	Exploit for Deserialization of Untrusted Data in Progress Ws Ftp Server	2 Oct 202314:55	–	githubexploit
CVE	CVE-2023-40044	27 Sep 202315:18	–	cve
Prion	Deserialization of untrusted data	27 Sep 202315:18	–	prion
AttackerKB	CVE-2023-40044	2 Oct 202300:00	–	attackerkb
Metasploit	Progress Software WS_FTP Unauthenticated Remote Code Execution	2 Oct 202310:42	–	metasploit
CISA KEV Catalog	Progress WS_FTP Server Deserialization of Untrusted Data Vulnerability	5 Oct 202300:00	–	cisa_kev
Talos Blog	Is it bad to have a major security incident on your résumé? (Seriously I don’t know)	5 Oct 202318:00	–	talosblog

Nvd

Node

progress ws_ftp_serverRange<8.7.4

progress ws_ftp_serverRange8.8–8.8.2

Source	Link
assetnote	www.assetnote.io/resources/research/rce-in-progress-ws-ftp-ad-hoc-via-iis-http-modules-cve-2023-40044
community	www.community.progress.com/s/article/WS-FTP-Server-Critical-Vulnerability-September-2023
theregister	www.theregister.com/2023/10/02/ws_ftp_update/
censys	www.censys.com/cve-2023-40044/
attackerkb	www.attackerkb.com/topics/bn32f9sNax/cve-2023-40044
packetstormsecurity	www.packetstormsecurity.com/files/174917/Progress-Software-WS_FTP-Unauthenticated-Remote-Code-Execution.html
rapid7	www.rapid7.com/blog/post/2023/09/29/etr-critical-vulnerabilities-in-ws_ftp-server/
progress	www.progress.com/ws_ftp

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

27 Sep 2023 15:18Current

9.6High risk

Vulners AI Score9.6

CVSS38.8

EPSS0.880

CWE-502