Umbra Wiki cve cve/CVE-2023-40044
Back to wiki

CVE-2023-40044 — Progress WS_FTP Server Deserialization of Untrusted Data Vulnerability

provenance: imported · CVE: CVE-2023-40044 · CWE: CWE-502

CVE-2023-40044: Progress WS_FTP Server Deserialization of Untrusted Data Vulnerability

CISA Known Exploited Vulnerability (KEV)

Vendor / project Progress
Product WS_FTP Server
Date added 2023-10-05
Due date 2023-10-26
Ransomware campaign use Known

Description

Progress WS_FTP Server contains a deserialization of untrusted data vulnerability in the Ad Hoc Transfer module that allows an authenticated attacker to execute remote commands on the underlying operating system.

Required action (CISA)

Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

Notes

https://community.progress.com/s/article/WS-FTP-Server-Critical-Vulnerability-September-2023; https://nvd.nist.gov/vuln/detail/CVE-2023-40044

Weakness behind it

CISA records this vulnerability as an instance of CWE-502. From there the chain continues into CAPEC attack patterns and ATT&CK techniques, all inside this corpus.

References

  • NVD: https://nvd.nist.gov/vuln/detail/CVE-2023-40044
  • KEV catalog: https://www.cisa.gov/known-exploited-vulnerabilities-catalog

See all 1,745 pages under Vulnerabilities (CVE) →