rejetto records
6 published records for vendor rejetto. 2 of them have been exploited in the wild (listed in CISA KEV) and 2 have a ready-made attack tool.
Researcher profile
- Entered KEV
- 2 · 33.3%
- Weaponized
- 2 · 33.3%
- Pre-auth RCE
- 3
- With a fix record
- 16.7%
- Median publish → KEV
- 1383 days
Pre-auth RCE: flaws that let an attacker run code over the network without an account. Median publish → KEV: the typical time between a record being published and CISA listing it as exploited.
Recurring classes
- CWE-94 Improper Control of Generation of Code ('Code Injection')2
- CWE-120 Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')1
- CWE-1336 Improper Neutralization of Special Elements Used in a Template Engine1
- CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')1
- CWE-93 Improper Neutralization of CRLF Sequences ('CRLF Injection')1
The weakness classes this vendor ships most often: where to look.
CWEAll records
6 records| Action | CVE | Vulnerability | Severity | EPSS · Published |
|---|---|---|---|---|
99Now | CVE-2024-23692Weaponized | Rejetto HTTP File Server 2.3m Unauthenticated RCErejetto · http file server · CWE-1336 | Critical9.8KEV | 99.4%May 31, 2024 |
99Now | CVE-2014-6287Weaponized | The findMacroMarker function in parserLib.pas in Rejetto HTTP File Server (aks HFS or HttpFileServer) 2.3x before 2.3c allows remote attackerejetto · http file server · CWE-94 | Critical9.8KEV | 99.3%Oct 7, 2014 |
47Plan | CVE-2024-39943Proof of concept | rejetto HFS (aka HTTP File Server) 3 before 0.52.10 on Linux, UNIX, and macOS allows OS command execution by remote authenticated users (if rejetto · http file server · CWE-78 | High8.8 | 39.4%Jul 4, 2024 |
39Monitor | CVE-2020-13432No exploit | rejetto HFS (aka HTTP File Server) v2.3m Build #300, when virtual files or folders are used, allows remote attackers to trigger an invalid-prejetto · http file server · CWE-120 | High7.5 | 30.8%Jun 8, 2020 |
33Monitor | CVE-2014-7226Proof of concept | The file comment feature in Rejetto HTTP File Server (hfs) 2.3c and earlier allows remote attackers to execute arbitrary code by uploading arejetto · http file server · CWE-94 | High7.5 | 9.1%Oct 9, 2014 |
30Monitor | CVE-2024-1226No exploit | Multiple vulnerabilities in Rejetto's Http File Serverrejetto · http file server · CWE-93 | High7.5 | 0.4%Mar 12, 2024 |
- CVE-2024-2369299Now
Rejetto HTTP File Server 2.3m Unauthenticated RCE
CriticalCVSS 9.8KEVWeaponizedEPSS 99%rejetto · http file serverMay 31, 2024
- CVE-2014-628799Now
The findMacroMarker function in parserLib.pas in Rejetto HTTP File Server (aks HFS or HttpFileServer) 2.3x before 2.3c allows remote attacke
CriticalCVSS 9.8KEVWeaponizedEPSS 99%rejetto · http file serverOct 7, 2014
- CVE-2024-3994347Plan
rejetto HFS (aka HTTP File Server) 3 before 0.52.10 on Linux, UNIX, and macOS allows OS command execution by remote authenticated users (if
HighCVSS 8.8Proof of conceptEPSS 39%rejetto · http file serverJul 4, 2024
- CVE-2020-1343239Monitor
rejetto HFS (aka HTTP File Server) v2.3m Build #300, when virtual files or folders are used, allows remote attackers to trigger an invalid-p
HighCVSS 7.5No exploitEPSS 30%rejetto · http file serverJun 8, 2020
- CVE-2014-722633Monitor
The file comment feature in Rejetto HTTP File Server (hfs) 2.3c and earlier allows remote attackers to execute arbitrary code by uploading a
HighCVSS 7.5Proof of conceptEPSS 9%rejetto · http file serverOct 9, 2014
- CVE-2024-122630Monitor
Multiple vulnerabilities in Rejetto's Http File Server
HighCVSS 7.5No exploitEPSS 0%rejetto · http file serverMar 12, 2024