RansomwarecriticalExploited in the wild

Progress Software Releases Urgent Hotfixes for Multiple Security Flaws in WS_FTP Server

The Hacker Newsby @TheHackersNewsOct 9, 2023 · 06:43 UTC (Oct 9, 2023)3 min read4 · 2 reads

Read at thehackernews.com

Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

CVEs: CVE-2023-40044 CVE-2023-42657 CVE-2023-40045 CVE-2023-40047 CVE-2023-40046 CVE-2023-40048 CVE-2022-27665 CVE-2023-40049

Tags: cve-2023-40044 cve-2023-42657 cve-2023-40045 cve-2023-40047 cve-2023-40046 ransomware

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2022-27665	Reflected XSS (via AngularJS sandbox escape expressions) exists in Progress Ipswitch WS_FTP Server 8.6.0	6.1	33%	PoC	Apr 3, 2023
CVE-2023-40044 +6 related CVEs CVE-2023-42657 CVE-2023-40046 CVE-2023-40048 CVE-2023-40045 CVE-2023-40049 CVE-2023-40047	Unauthenticated Deserialization RCE in Progress WS_FTP Server	8.8 group max	90%	KEVRansomwarePoC ×2	Sep 27, 2023 KEV Oct 5, 2023

From the original article

3 min read at thehackernews.com

 Ravie Lakshmanan  Sep 29, 2023 Server Security / Vulnerability Progress Software has released hotfixes for a critical security vulnerability, alongside seven other flaws, in the WS_FTP Server Ad hoc Transfer Module and in the WS_FTP Server manager interface. Tracked as CVE-2023-40044 , the flaw has a CVSS score of 10. 0, indicating maximum severity.

The Hacker News

By @TheHackersNews · thehackernews.com

Read the full article at The Hacker News

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.