CVE-2023-40044
WS_FTP Server Ad Hoc Transfer Module .NET Deserialization Vulnerability
KEV RANSOMWAREHIGH 8.8EPSS 90.4%
In WS_FTP Server versions prior to 8.7.4 and 8.8.2, a pre-authenticated attacker could leverage a .NET deserialization vulnerability in the Ad Hoc Transfer module to execute remote commands on the underlying WS_FTP Server operating system.
- Affected
- Progress Software Corporation · WS_FTP Server
- CVSS v3.1 NVD
- 8.8 HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - CVSS v3.1 PROGRESS
- 10.0 CRITICAL
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H - EPSS
- 90.35% chance of exploitation in the next 30 days, 100th percentile
- CISA KEV
- added 2023-10-05, used in ransomware campaigns
- Nuclei
- critical · CWE-502
- Published
- 2023-09-27
- Updated
- 2025-10-21
Proof-of-concept exploits (4)
- http://packetstormsecurity.com/files/174917/Progress-Software-WS_FTP-Unauthenticated-Remo…
- https://www.assetnote.io/resources/research/rce-in-progress-ws-ftp-ad-hoc-via-iis-http-mo…
- kenbuckler/WS_FTP-CVE-2023-400441★ · 2023-10-02
- getdrive/PoC73★ · 2024-08-12
Nuclei templates (1)
Metasploit modules (1)
Security advisories
- https://community.progress.com/s/article/WS-FTP-Server-Critical-Vulnerability-September-2…
- https://attackerkb.com/topics/bn32f9sNax/cve-2023-40044
- https://censys.com/cve-2023-40044
- https://www.rapid7.com/blog/post/2023/09/29/etr-critical-vulnerabilities-in-ws_ftp-server
- https://www.theregister.com/2023/10/02/ws_ftp_update
- https://www.progress.com/ws_ftp