Security researchers believe mass exploitation attempts against #WS_FTP have begun

https://www.theregister.com/2023/10/02/ws_ftp_update/

「セキュリティ研究者は、 #WS_FTP に対する大規模な悪用の試みが始まっていると考えています 」： The Register

「 #Progress は 水曜日、WS_FTP の 8 つの個別の #脆弱性 に対する 修正をリリースしました 。その中には、CVSS 重大度スケールで最大スコア 10 と評価された脆弱性も含まれています。 」

https://www.theregister.com/2023/10/02/ws_ftp_update/

#prattohome #TheResister

"🚨 Critical Vulnerabilities Unearthed in WS_FTP Server by Progress Software 🚨"

Progress Software has issued a warning regarding multiple critical vulnerabilities found in its WS_FTP Server. The vulnerabilities span a range of issues including .NET deserialization, directory traversal, SQL injection, and cross-site scripting, with severity scores ranging from 5.3 (Medium) to a whopping 10.0 (Critical). The most severe among them, CVE-2023-40044 and CVE-2023-42657, could potentially allow attackers to execute remote commands on the WS_FTP Server operating system and perform unauthorized file operations respectively. Progress has rolled out patches to address these vulnerabilities, urging users to upgrade to the latest version, 8.8.2, to safeguard against exploitation.

The article is penned by Eswar on October 2, 2023, who is known for his engaging cybersecurity content. This discovery sheds light on the importance of regular security audits and timely patch management to thwart potential cyber threats. 🛡️🔐

Source: GBHackers

Tags: #CyberSecurity #Vulnerability #WS_FTP #ProgressSoftware #PatchManagement #InfoSec #CVE202340044 #CVE202342657

Progress has released software updates to address eight vulnerabilities in its WS_FTP Server software that could lead to remote code execution. Vulnerabilities include deserialization, directory traversal, XSS, SQL injection, CSRF and authentication bypass. WS_FTP Server versions before 8.7.4 and 8.8.2 are affected. Users are advised to update ASAP.

#cybersecurity #progress #ws_ftp

https://thehackernews.com/2023/09/progress-software-releases-urgent.html

Progress Software is having an interesting time. First #MOVEit, now multiple #vulnerability disclosures for their #WS_FTP product. The silver lining here is that it doesn’t look like any of these are known to have been exploited in the wild. (Yet?)

But out of curiosity, we looked at the Internet exposure of WS_FTP instances with the Ad Hoc Transfer module installed, read about it here ⬇️

#infosec #securityResearch #CensysResearch #MFT (No, this isn’t MFT but it all feels very…related.)

https://censys.com/cve-2023-40044/