CompleteFTPService.exe in the server in EnterpriseDT CompleteFTP before 12.1.4 allows Remote Code Execution by leveraging a Windows user account that has SSH access. The exec command is always run as SYSTEM.
CPE | Name | Operator | Version |
---|---|---|---|
completeftp_server | lt | 12.1.4 |