Authentication flaw

2018-10-0506:29:00

PRIOn knowledge base

www.prio-n.com

8.7 High

AI Score

Confidence

Low

0.012 Low

EPSS

Percentile

85.5%

JSON

Ice Cold Apps Servers Ultimate 6.0.2(12) does not require authentication for TELNET, SSH, or FTP, which allows remote attackers to execute arbitrary code by uploading PHP scripts.

CPENameOperatorVersion
servers_ultimateeq6.0.2

CPE	Name	Operator	Version
	servers_ultimate	eq	6.0.2

References

www.vapid.dhs.org/advisories/ultimate-server-android-vulns.html

www.vapidlabs.com/advisory.php?v=108