CVE-2021-41635

HIGH 8.8CVE-2021-41635 · Published 24/06/2022 · updated 17/06/2026

In short

CVE-2021-41635 is a HIGH (CVSS 8.8) vulnerability affecting ftp server (melag).
Chance of exploitation in the next 30 days (EPSS): 2.1%, higher than 82.1% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
ftp server melag	`= 2.2.0.4`	No fix yet

Description

When installed as Windows service MELAG FTP Server 2.2.0.4 is run as SYSTEM user, which grants remote attackers to abuse misconfigurations or vulnerabilities with administrative access over the entire host system.

References

securesystems.de/blog/advisory-and-exploitation-the-melag-ftp-server · Exploit

More vulnerabilities in ftp server

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

ftp server

melag

= 2.2.0.4

No fix yet

More vulnerabilities in ftp server

See all →