CVE-2021-41637

PoC —

CVSS 3.1

7.1 high

EPSS

<1%p25

Published

Jun 24, 2022 (Jun 24, 2022)

Modified

Jun 17, 2026

Description

Weak access control permissions in MELAG FTP Server 2.2.0.4 allow the "Everyone" group to read the local FTP configuration file, which includes among other information the unencrypted passwords of all FTP users.

Vendors: melag
Products: ftp server
Weakness: CWE-276
Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

NVD CVE.org GitHub PoCs EPSS (0.3%)

In the news0 stories

No ingested article mentions this CVE yet.