What is CVE-2021-41636?

CVE-2021-41636 is a medium-severity vulnerability in Melag FTP Server, classified under Path Traversal. CVSS score: 6.5/10. Published 2022-06-24.

How severe is CVE-2021-41636?

Medium severity. CVSS v3 base score is 6.5 out of 10.

Path Traversal in Melag FTP Server

CVE-2021-41636

MELAG FTP Server 2.2.0.4 allows an attacker to use the CWD command to break out of the FTP servers root directory and operate on the entire operating system, while the access restrictions of the user running the FTP server apply.

Vulnerability class: Path Traversal (Directory Traversal)

EPSS: 0.013 (68.6th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 6.5 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N.

Affected products

Melag Ftp_server — versions 2.2.0.4
N/a — versions n/a

Weakness classification (CWE)

CWE-22 — Path Traversal

References

cve@mitre.org (Exploit, Third Party Advisory, x_refsource_MISC, Mitigation)

Frequently asked questions

What is CVE-2021-41636?: CVE-2021-41636 is a medium-severity vulnerability in Melag FTP Server, classified under Path Traversal. CVSS score: 6.5/10. Published 2022-06-24.
How severe is CVE-2021-41636?: Medium severity. CVSS v3 base score is 6.5 out of 10.