melag records
6 published records for vendor melag.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 0
- With a fix record
- 0%
- Median publish → KEV
- No record has entered KEV
Recurring classes
- CWE-276 Incorrect Default Permissions2
- CWE-203 Observable Discrepancy1
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')1
- CWE-287 Improper Authentication1
- CWE-312 Cleartext Storage of Sensitive Information1
The weakness classes this vendor ships most often: where to look.
CWEAttack profile
All records
6 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
36Monitor | CVE-2021-41635No exploit | When installed as Windows service MELAG FTP Server 2.2.0.4 is run as SYSTEM user, which grants remote attackers to abuse misconfigurations omelag · ftp server · CWE-276 | High8.8 | — | 2.1% | Jun 24, 2022 |
31Monitor | CVE-2021-41638No exploit | The authentication checks of the MELAG FTP Server in version 2.2.0.4 are incomplete, which allows a remote attacker to access local files onmelag · ftp server · CWE-287 | High7.5 | — | 1.7% | Jun 24, 2022 |
28Monitor | CVE-2021-41637No exploit | Weak access control permissions in MELAG FTP Server 2.2.0.4 allow the "Everyone" group to read the local FTP configuration file, which inclumelag · ftp server · CWE-276 | High7.1 | — | 0.3% | Jun 24, 2022 |
26Monitor | CVE-2021-41636No exploit | MELAG FTP Server 2.2.0.4 allows an attacker to use the CWD command to break out of the FTP servers root directory and operate on the entire melag · ftp server · CWE-22 | Medium6.5 | — | 1.4% | Jun 24, 2022 |
22Monitor | CVE-2021-41639No exploit | MELAG FTP Server 2.2.0.4 stores unencrpyted passwords of FTP users in a local configuration file.melag · ftp server · CWE-312 | Medium5.5 | — | 0.2% | Jun 24, 2022 |
21Monitor | CVE-2021-41634No exploit | A user enumeration vulnerability in MELAG FTP Server 2.2.0.4 allows an attacker to identify valid FTP usernames.melag · ftp server · CWE-203 | Medium5.3 | — | 0.9% | Jun 24, 2022 |
- CVE-2021-4163536Monitor
When installed as Windows service MELAG FTP Server 2.2.0.4 is run as SYSTEM user, which grants remote attackers to abuse misconfigurations o
HighCVSS 8.8No exploitEPSS 2%melag · ftp serverJun 24, 2022
- CVE-2021-4163831Monitor
The authentication checks of the MELAG FTP Server in version 2.2.0.4 are incomplete, which allows a remote attacker to access local files on
HighCVSS 7.5No exploitEPSS 1%melag · ftp serverJun 24, 2022
- CVE-2021-4163728Monitor
Weak access control permissions in MELAG FTP Server 2.2.0.4 allow the "Everyone" group to read the local FTP configuration file, which inclu
HighCVSS 7.1No exploitEPSS 0%melag · ftp serverJun 24, 2022
- CVE-2021-4163626Monitor
MELAG FTP Server 2.2.0.4 allows an attacker to use the CWD command to break out of the FTP servers root directory and operate on the entire
MediumCVSS 6.5No exploitEPSS 1%melag · ftp serverJun 24, 2022
- CVE-2021-4163922Monitor
MELAG FTP Server 2.2.0.4 stores unencrpyted passwords of FTP users in a local configuration file.
MediumCVSS 5.5No exploitEPSS 0%melag · ftp serverJun 24, 2022
- CVE-2021-4163421Monitor
A user enumeration vulnerability in MELAG FTP Server 2.2.0.4 allows an attacker to identify valid FTP usernames.
MediumCVSS 5.3No exploitEPSS 0%melag · ftp serverJun 24, 2022