CVE-2023-40044
KEV · RansomwareProgress WS_FTP Server Deserialization of Untrusted Data Vulnerability
View CVE record →- Vendor / Project
- Progress
- Product
- WS_FTP Server
- Date added
- Oct 5, 2023
- Due date
- Oct 26, 2023
- Known ransomware use
- Known
- CWEs
- CWE-502
Description
Progress WS_FTP Server contains a deserialization of untrusted data vulnerability in the Ad Hoc Transfer module that allows an authenticated attacker to execute remote commands on the underlying operating system.
Required action
Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.