CVE-2023-43177

CrushFTP Unauthenticated RCE

Severity Score

9.8

*CVSS v3.1

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

*Multiple Sources

Exploited in Wild

*KEV

Decision

Attend

*SSVC

Descriptions

CrushFTP prior to 10.5.1 is vulnerable to Improperly Controlled Modification of Dynamically-Determined Object Attributes.

CrushFTP anterior a 10.5.1 es vulnerable a modificaciones controladas incorrectamente de atributos de objetos determinados dinámicamente.

*Credits: N/A

CVSS Scores

NISTv3.1 9.8

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

* Common Vulnerability Scoring System

SSVC

Decision:Attend

Exploitation

Poc

Automatable

Yes

Tech. Impact

Total

* Organization's Worst-case Scenario

Timeline

2023-08-08 First Exploit
2023-09-18 CVE Reserved
2023-11-17 CVE Published
2024-09-04 CVE Updated
2024-09-12 EPSS Updated
---------- Exploited in Wild
---------- KEV Due Date

CWE

CWE-913: Improper Control of Dynamically-Managed Code Resources

CAPEC

References (4)

URL	Tag	Source
https://github.com/the-emmons/CVE-Disclosures/blob/main/Pending/CrushFTP-2023-1.md	Third Party Advisory

URL	Date	SRC
https://github.com/the-emmons/CVE-2023-43177	2024-06-14
https://convergetp.com/2023/11/16/crushftp-zero-day-cve-2023-43177-discovered	2024-09-04
https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/multi/http/crushftp_rce_cve_2023_43177.rb	2023-08-08

URL	Date	SRC

URL	Date	SRC

Affected Vendors, Products, and Versions

Vendor		Product				Version		Other		Status
Vendor	Product	Version	Other	Status	<-- -->	Vendor	Product	Version	Other	Status
Crushftp Search vendor "Crushftp"		Crushftp Search vendor "Crushftp" for product "Crushftp"				< 10.5.2 Search vendor "Crushftp" for product "Crushftp" and version " < 10.5.2"		-		Affected