PT-2020-16745

Name of the Vulnerable Software and Affected Versions Biscom Secure File Transfer SFT versions 5.1.0 through 5.1.1081 Biscom Secure File Transfer SFT versions 6.0.0 through 6.0.1010 Description The issue allows user credential theft. Recommendations For versions 5.1.0 through 5.1.1081, update to...

CVE-2020-27646: Undefined Security Weakness

Biscom Secure File Transfer SFT before 5.1.1082 and 6.x before 6.0.1011 allows user credential theft...

CVE-2020-8796

Biscom Secure File Transfer SFT before 5.1.1071 and 6.0.1xxx before 6.0.1005 allows Remote Code Execution on the server...

CVE-2020-8796

Biscom Secure File Transfer (SFT) is affected by CVE-2020-8796. The vulnerability allows remote code execution on the server in versions prior to 5.1.1071 and 6.0.1xxx prior to 6.0.1005. Connected sources confirm the impact as remote code execution on the server, with the affected products stated...

PT-2020-20285

Name of the Vulnerable Software and Affected Versions Biscom Secure File Transfer SFT versions prior to 5.1.1071 Biscom Secure File Transfer SFT versions 6.0.1xxx prior to 6.0.1005 Description The issue allows Remote Code Execution on the server. Recommendations For versions prior to 5.1.1071,...

CVE-2020-8796: Undefined Security Weakness

Biscom Secure File Transfer SFT before 5.1.1071 and 6.0.1xxx before 6.0.1005 allows Remote Code Execution on the server...

CVE-2020-8503

Biscom Secure File Transfer SFT 5.0.1050 through 5.1.1067 and 6.0.1000 through 6.0.1003 allows Insecure Direct Object Reference IDOR by an authenticated sender because of an error in a file-upload feature. This is fixed in 5.1.1068 and 6.0.1004...

CVE-2020-8503

Biscom Secure File Transfer SFT 5.0.1050 through 5.1.1067 and 6.0.1000 through 6.0.1003 allows Insecure Direct Object Reference IDOR by an authenticated sender because of an error in a file-upload feature. This is fixed in 5.1.1068 and 6.0.1004...

PT-2020-20180

Name of the Vulnerable Software and Affected Versions Biscom Secure File Transfer SFT versions 5.0.1050 through 5.1.1067 Biscom Secure File Transfer SFT versions 6.0.1000 through 6.0.1003 Description The issue allows Insecure Direct Object Reference IDOR by an authenticated sender due to an error...

CVE-2020-8503: Authorization Bypass Through User-Controlled Key

Biscom Secure File Transfer SFT 5.0.1050 through 5.1.1067 and 6.0.1000 through 6.0.1003 allows Insecure Direct Object Reference IDOR by an authenticated sender because of an error in a file-upload feature. This is fixed in 5.1.1068 and 6.0.1004...

CVE-2016-10710

Biscom Secure File Transfer (SFT) versions 5.0.1000–5.0.1048 fail to validate the dataFieldId and use sequential numbers, enabling remote authenticated users to overwrite or read files via crafted requests. The issue is fixed in version 5.0.1050. Affected platforms are Biscom SFT; exact root caus...

PT-2018-4881

Name of the Vulnerable Software and Affected Versions Biscom Secure File Transfer SFT versions 5.0.1000 through 5.0.1048 Description The issue allows remote authenticated users to overwrite or read files via crafted requests due to the lack of validation of the dataFieldId value. This is possible...

CVE-2016-10710: Improper Input Validation

Biscom Secure File Transfer SFT 5.0.1000 through 5.0.1048 does not validate the dataFieldId value, and uses sequential numbers, which allows remote authenticated users to overwrite or read files via crafted requests. Version 5.0.1050 contains the fix...

CVE-2017-9659

A Stack-Based Buffer Overflow issue was discovered in Fuji Electric Monitouch V-SFT versions prior to Version 5.4.43.0. The stack-based buffer overflow vulnerability has been identified, which may cause a crash or allow remote code execution...

CVE-2017-9660

A Heap-Based Buffer Overflow was discovered in Fuji Electric Monitouch V-SFT versions prior to Version 5.4.43.0. A heap-based buffer overflow vulnerability has been identified, which may cause a crash or allow remote code execution...

Stack overflow

A Stack-Based Buffer Overflow issue was discovered in Fuji Electric Monitouch V-SFT versions prior to Version 5.4.43.0. The stack-based buffer overflow vulnerability has been identified, which may cause a crash or allow remote code execution...

Input validation

An Improper Privilege Management issue was discovered in Fuji Electric Monitouch V-SFT versions prior to Version 5.4.43.0. Monitouch V-SFT is installed in a directory with weak access controls by default, which could allow an authenticated attacker with local access to escalate privileges...

CVE-2017-9662

An Improper Privilege Management issue was discovered in Fuji Electric Monitouch V-SFT versions prior to Version 5.4.43.0. Monitouch V-SFT is installed in a directory with weak access controls by default, which could allow an authenticated attacker with local access to escalate privileges...

Heap overflow

A Heap-Based Buffer Overflow was discovered in Fuji Electric Monitouch V-SFT versions prior to Version 5.4.43.0. A heap-based buffer overflow vulnerability has been identified, which may cause a crash or allow remote code execution...

CVE-2017-9659

A Stack-Based Buffer Overflow issue was discovered in Fuji Electric Monitouch V-SFT versions prior to Version 5.4.43.0. The stack-based buffer overflow vulnerability has been identified, which may cause a crash or allow remote code execution...