CVE-2021-41637

7.1 highEPSS 0.3%

High (7.1) in melag ftp server. EPSS 0.3% chance of exploitation in the next 30 days.

Weak access control permissions in MELAG FTP Server 2.2.0.4 allow the "Everyone" group to read the local FTP configuration file, which includes among other information the unencrypted passwords of all FTP users.

Severity

CVSS 3.1

7.1 high

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

EPSS: 0.3% chance of exploitation in the next 30 days; higher than 25% of CVEs (scores of 2026-10-31)
CWE: CWE-276
Published: 2022-06-24
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

melag:ftp_server

References

https://www.securesystems.de/blog/advisory-and-exploitation-the-melag-ftp-server/
https://www.securesystems.de/blog/advisory-and-exploitation-the-melag-ftp-server/

Check your stack JSON