Sftp Gateway Firmware

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2023-48795 Dec 18, 16:15 LIB MEDIUM POC PATCH THREAT This Month

The SSH transport protocol with certain OpenSSH extensions, found in OpenSSH before 9.6 and other products, allows remote attackers to bypass integrity checks such that some packets are omitted (from. Rated medium severity (CVSS 5.9), this vulnerability is remotely exploitable, no authentication required. Public exploit code available and EPSS exploitation probability 53.6%.

Authentication Bypass Apache Java Node.js Golang +85

NVD GitHub

CVSS 3.1

5.9

EPSS

53.6%

Threat

4.3

CVE-2023-47174 Oct 31, 04:15 CRITICAL Act Now

Thorn SFTP gateway 3.4.x before 3.4.4 uses Pivotal Spring Framework for Java deserialization of untrusted data, which is not supported by Pivotal, a related issue to CVE-2016-1000027. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

RCE Java Deserialization Sftp Gateway Firmware

NVD

CVSS 3.1

9.8

EPSS

1.0%

CVE-2023-48795 LIB

EPSS 54% 4.3 CVSS 5.9

MEDIUM POC PATCH THREAT This Month

Authentication Bypass Apache Java +87

NVD GitHub

CVE-2023-47174

EPSS 1% CVSS 9.8

CRITICAL Act Now

RCE Java Deserialization +1

NVD