WS-FTP targeted in the wild

[rek2 hispagatos]

Progress released fixes for eight separate vulnerabilities in
WS_FTP on Wednesday, including one rated a maximum score of 10
on the CVSS severity scale. Days later, the company said
there was no evidence of exploitation at the time... ! O_O

But...

Security researchers have spotted what they believe to be
a "possible mass exploitation" of vulnerabilities in Progress
Software's WS_FTP Server. Researchers at Rapid7 began
noticing evidence of exploitation on 30 September across
multiple instances of WS_FTP.


I am even surprised people still use WS_FTP instead of lets say SFTP/SCP
etc ... :facepalm:


Happy Hacking
ReK2

[rek2 hispagatos]

Post by rek2 hispagatos
I am even surprised people still use WS_FTP instead of lets say SFTP/SCP

Forgot to add the link:
https://community.progress.com/s/article/WS-FTP-Server-Critical-Vulnerability-September-2023

Happy Hacking
ReK2