What’s Vulnerable › Vulnerabilities

CVE-2021-41638

• Severity: high (CVSS 7.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.7% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2022-06-24 · updated 2026-06-17
• Weakness: CWE-287

Description

The authentication checks of the MELAG FTP Server in version 2.2.0.4 are incomplete, which allows a remote attacker to access local files only by using a valid username.

Affected products

• Melag Ftp Server: 2.2.0.4

References

• https://www.securesystems.de/blog/advisory-and-exploitation-the-melag-ftp-server/
• https://www.securesystems.de/blog/advisory-and-exploitation-the-melag-ftp-server/

Get alerted when CVE-2021-41638 or the next vulnerability affects your stack