Lucene search

K
wizblogWiz BlogWIZBLOG:68F7377E3515B9BE1772F0458888195D
HistoryApr 24, 2024 - 4:15 p.m.

CVE-2024-4040 exploited in the wild: everything you need to know

2024-04-2416:15:18
Wiz Blog
www.wiz.io
34
cve-2024-4040
crushftp
critical vulnerability
exploited in the wild
patch urgently

10 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

7.2 High

AI Score

Confidence

Low

0.966 High

EPSS

Percentile

99.6%

Detect and mitigate CVE-2024-4040, a critical vulnerability in CrushFTP exploited in the wild. Organizations should patch urgently.

10 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

7.2 High

AI Score

Confidence

Low

0.966 High

EPSS

Percentile

99.6%