CVE-2023-40044 Progress WS_FTP Server
Progress WS_FTP Server contains a deserialization of untrusted data vulnerability in the Ad Hoc Transfer module that allows an authenticated attacker to execute remote commands on the underlying operating system.
- CVSS
- not scored
On CISA’s exploited list
Progress WS_FTP Server Deserialization of Untrusted Data Vulnerability
- Added
- 2023-10-05
- Federal patch deadline
- 2023-10-26
- Ransomware use
- known