Melag FTP Server
6 CVEs affecting Melag FTP Server. Latest disclosed: 2022-06-24. Critical: 0, High: 3.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2021-41635 | High | 8.8 | 2022-06-24 | When installed as Windows service MELAG FTP Server 2.2.0.4 is run as SYSTEM user, which grants remote attackers to abuse misconfigurations or vulnerabilities w… |
CVE-2021-41638 | High | 7.5 | 2022-06-24 | The authentication checks of the MELAG FTP Server in version 2.2.0.4 are incomplete, which allows a remote attacker to access local files only by using a valid… |
CVE-2021-41637 | High | 7.1 | 2022-06-24 | Weak access control permissions in MELAG FTP Server 2.2.0.4 allow the "Everyone" group to read the local FTP configuration file, which includes among other inf… |
CVE-2021-41636 | Medium | 6.5 | 2022-06-24 | MELAG FTP Server 2.2.0.4 allows an attacker to use the CWD command to break out of the FTP servers root directory and operate on the entire operating system, w… |
CVE-2021-41639 | Medium | 5.5 | 2022-06-24 | MELAG FTP Server 2.2.0.4 stores unencrpyted passwords of FTP users in a local configuration file. |
CVE-2021-41634 | Medium | 5.3 | 2022-06-24 | A user enumeration vulnerability in MELAG FTP Server 2.2.0.4 allows an attacker to identify valid FTP usernames. |