High severity · published Mar 20, 2017
CVE-2017-6803
Multiple cross-site request forgery (CSRF) vulnerabilities in the web interface in the Scheduler in SolarWinds (formerly Serv-U) FTP Voyager 16.2.0 allow remote attackers to…
8.8
CVSS
4.4%
EPSS
No
On KEV
Description
Multiple cross-site request forgery (CSRF) vulnerabilities in the web interface in the Scheduler in SolarWinds (formerly Serv-U) FTP Voyager 16.2.0 allow remote attackers to hijack the authentication of users for requests that (1) change the admin password, (2) terminate the scheduler, or (3) possibly execute arbitrary commands via crafted requests to Admin/XML/Result.xml.
CVSS vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
Required
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)4.4% · higher than 91% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
FV
Ftp Voyager · Solarwinds
16.2.0 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2017-6803
CVE.org
https://www.cve.org/CVERecord?id=CVE-2017-6803
Exploit
http://hyp3rlinx.altervista.org/advisories/FTP-VOYAGER-SCHEDULER-CSRF-REMOTE-CMD-EXECUTION.txt
Exploit
http://packetstormsecurity.com/files/141567/FTP-Voyager-Scheduler-16.2.0-CSRF-Denial-Of-Service.html
Third Party Advisory
http://www.securityfocus.com/bid/96814
Exploit
https://www.exploit-db.com/exploits/41574/
More from Ftp Voyager
5.5
CVE-2018-25252
FTP Voyager 16.2.0 Denial of Service via Malformed Site Profile