9
CVSSv2

CVE-2009-4646

Published: 19/02/2010 Updated: 22/02/2010
CVSS v2 Base Score: 9 | Impact Score: 10 | Exploitability Score: 8
VMScore: 801
Vector: AV:N/AC:L/Au:S/C:C/I:C/A:C

Vulnerability Summary

Static code injection vulnerability in the administrative web interface in Accellion Secure File Transfer Appliance allows remote authenticated administrators to inject arbitrary shell commands by appending them to a request to update the SNMP public community string.

Vulnerable Product Search on Vulmon Subscribe to Product

accellion secure file transfer appliance