CVE-2021-41635

8.8 highEPSS 2.1%

High (8.8) in melag ftp server. EPSS 2.1% chance of exploitation in the next 30 days.

When installed as Windows service MELAG FTP Server 2.2.0.4 is run as SYSTEM user, which grants remote attackers to abuse misconfigurations or vulnerabilities with administrative access over the entire host system.

Severity

CVSS 3.1

8.8 high

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS: 2.1% chance of exploitation in the next 30 days; higher than 82% of CVEs (scores of 2026-10-31)
CWE: CWE-276
Published: 2022-06-24
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

melag:ftp_server

References

https://www.securesystems.de/blog/advisory-and-exploitation-the-melag-ftp-server/
https://www.securesystems.de/blog/advisory-and-exploitation-the-melag-ftp-server/

Check your stack JSON