CVE-2019-16864
High
Description
CompleteFTPService.exe in the server in EnterpriseDT CompleteFTP before 12.1.4 allows Remote Code Execution by leveraging a Windows user account that has SSH access. The exec command is always run as SYSTEM.
SeverityHigh
CVSS8.8
Exploit probability—
ProductEnterprisedt Completeftp Server
PublishedFeb 14, 2022
First seenFeb 14, 2022
How to fix
Update
- enterprisedt completeftp_server12.1.4 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| enterprisedt completeftp_server | v < 12.1.4 | 12.1.4 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.