CVE-2009-4646: Code Injection
Static code injection vulnerability in the administrative web interface in Accellion Secure File Transfer Appliance allows remote authenticated administrators to inject arbitrary shell commands by appending them to a request to update the SNMP public community string.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2009-4646?
CVE-2009-4646 is classified as a high severity vulnerability due to its potential for remote code execution.
How do I fix CVE-2009-4646?
To fix CVE-2009-4646, update the Accellion Secure File Transfer Appliance to the latest version provided by the vendor.
Who is affected by CVE-2009-4646?
CVE-2009-4646 affects remote authenticated administrators of the Accellion Secure File Transfer Appliance.
What type of vulnerability is CVE-2009-4646?
CVE-2009-4646 is a static code injection vulnerability that allows command injection through the administrative web interface.
Can CVE-2009-4646 be exploited remotely?
Yes, CVE-2009-4646 can be exploited remotely by authenticated users who access the administrative interface.