by Kastro
Paper/Archive/CVE-2020-14057

CVE-2020-14057

mitre — Monsta FTP 2.10.1 or below allows external control of paths used in filesystem operations.

EPSS 3%CVSS 9.8
critical.is priorityof 100
46
CVSS 9.8 (NVD)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 85.2.852 × 2017.0No public exploit+100.0SSVC exploitation: unknown+100.0
Description · from the CVE record

Monsta FTP 2.10.1 or below allows external control of paths used in filesystem operations. This allows attackers to read and write arbitrary local files, allowing an attacker to gain remote code execution in common deployments.

Affected

ProductAffectedFixed inSource
n/an/a–CNA

Scores by source

NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References

refmonstaftp.com/notesrefgithub.com/sbaresearch/advisories/tree/public/2019/SBA-ADV-20191203-01_Monsta_FTP_Arbitrary_File_Read_and_Write