Vulnerability · Published Jun 22, 2023 · Assigned by rapid7
CVE-2023-2989Fortra Globalscape Administration Server Out of Bounds Memory Read
Critical 9.1
In plain English
A critical-severity out-of-bounds read in Globalscape EFT from Fortra. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 1.0% (higher than 62% of all known vulnerabilities).
Severity (CVSS NVD)9.1Critical
Exploit odds (30 days)1.0%top 38.0% of all CVEs
Exploited in the wildNo reportsCISA SSVC: poc
Attack toolingNoneno public tooling known
Official description
Fortra Globalscape EFT versions before 8.1.0.16 suffer from an out of bounds memory read in their administration server, which can allow an attacker to crash the service or bypass authentication if successfully exploited
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Fortra | Globalscape EFT | 8.0.0 – before 8.1.0.16 |
Weakness: CWE-125