CVE-2021-41638

HIGH 7.5CVE-2021-41638 · Published 24/06/2022 · updated 17/06/2026

In short

CVE-2021-41638 is a HIGH (CVSS 7.5) vulnerability affecting ftp server (melag).
Chance of exploitation in the next 30 days (EPSS): 1.7%, higher than 77.9% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
ftp server melag	`= 2.2.0.4`	No fix yet

Description

The authentication checks of the MELAG FTP Server in version 2.2.0.4 are incomplete, which allows a remote attacker to access local files only by using a valid username.

References

securesystems.de/blog/advisory-and-exploitation-the-melag-ftp-server · Exploit

More vulnerabilities in ftp server

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

ftp server

melag

= 2.2.0.4

No fix yet

More vulnerabilities in ftp server

See all →