| Package | Affected versions | Patched versions |
|---|---|---|
| proface gp-pro ex ex-ed | ≤ 4.0.4 | |
| proface gp-pro ex pfxexedls | ≤ 4.0.4 | |
| proface gp-pro ex pfxexedv | ≤ 4.0.4 | |
| proface gp-pro ex pfxexgrpls | ≤ 4.0.4 |
The FTP server in Pro-face GP-Pro EX EX-ED before 4.05.000, PFXEXEDV before 4.05.000, PFXEXEDLS before 4.05.000, and PFXEXGRPLS before 4.05.000 has hardcoded credentials, which makes it easier for remote attackers to bypass authentication by leveraging knowledge of these credentials.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free