An issue was discovered in South River Technologies TitanFTP NextGen server that allows for a vertical privilege escalation leading to remote code execution.
References
| Link | Resource |
|---|---|
| https://www.southrivertech.com/software/nextgen/titanftp/en/relnotes.pdf | Release Notes |
| https://www.whiteoaksecurity.com/blog/titanftp-vulnerability-disclosure/ | Exploit Third Party Advisory |
| https://www.southrivertech.com/software/nextgen/titanftp/en/relnotes.pdf | Release Notes |
| https://www.whiteoaksecurity.com/blog/titanftp-vulnerability-disclosure/ | Exploit Third Party Advisory |
Configurations
History
09 Jan 2025, 19:15
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | CWE-94 |
21 Nov 2024, 07:53
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://www.southrivertech.com/software/nextgen/titanftp/en/relnotes.pdf - Release Notes | |
| References | () https://www.whiteoaksecurity.com/blog/titanftp-vulnerability-disclosure/ - Exploit, Third Party Advisory |
09 Jun 2023, 18:57
| Type | Values Removed | Values Added |
|---|---|---|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 7.8 |
| References | (MISC) https://www.southrivertech.com/software/nextgen/titanftp/en/relnotes.pdf - Release Notes | |
| References | (MISC) https://www.whiteoaksecurity.com/blog/titanftp-vulnerability-disclosure/ - Exploit, Third Party Advisory | |
| CPE | cpe:2.3:a:southrivertech:titan_ftp_server_nextgen:*:*:*:*:*:*:*:* | |
| CWE | NVD-CWE-noinfo |
02 Jun 2023, 04:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2023-06-02 04:15
Updated : 2025-01-09 19:15
NVD link : CVE-2023-27744
Mitre link : CVE-2023-27744
CVE.ORG link : CVE-2023-27744
JSON object : View
Products Affected
southrivertech
- titan_ftp_server_nextgen
CWE