CVE-2019-5623

CRITICAL

9.8

CVSS Severity Score

EPSS Score0.1420%

EPSS Percentile7.55th

Published2020年4月29日

Last Modified2024年11月21日

Vulnerability Description

Accellion File Transfer Appliance version FTA_8_0_540 suffers from an instance of CWE-77: Improper Neutralization of Special Elements used in a Command ('Command Injection').

Affected Platforms (CPE)

📦

Accellion

File Transfer Appliance

= 8_0_540

References & Advisories

🔗 https://www.rapid7.com/db/modules/exploit/linux/misc/accellion_fta_mpipe2

相关漏洞威胁

CVE-2015-28579.8

Accellion File Transfer Appliance before FTA_9_11_210 allows remote attackers to execute arbitrary code via shell metacharacters i...

CVE-2016-23519.8

SQL injection vulnerability in home/seos/courier/security_key2.api on the Accellion File Transfer Appliance (FTA) before FTA_9_12_...

CVE-2019-56229.8

Accellion File Transfer Appliance version FTA_8_0_540 suffers from an instance of CWE-798: Use of Hard-coded Credentials.

CVE-2009-46469.0

Static code injection vulnerability in the administrative web interface in Accellion Secure File Transfer Appliance allows remote ...