Accellion File Transfer Appliance < 9_12_416 Multiple Vulnerabilities

critical Nessus Plugin ID 154933

Language:

Synopsis

The remote device is affected by multiple vulnerabilities.

Description

The version of the remote Accellion Secure File Transfer Appliance is prior to 9_12_416. It is, therefore, affected by multiple vulnerabilities:

- SQL injection via a crafted Host header in a request to an endpoint. (CVE-2021-27101)

- OS command execution via a local web service call. (CVE-2021-27102)

- SSRF via a crafted POST request to an endpoint. (CVE-2021-27103)

- OS command execution via a crafted POST request to various admin endpoints. (CVE-2021-27104)

Also, Accellion File Transfer Appliance is no longer supported by the vendor.
Lack of support implies that no new security patches for the product will be released by the vendor. As a result, it is likely to contain other security vulnerabilities.

Solution

Update to version 9_12_416 or later, or upgrade to a more secure platform, kiteworks that is currently supported.

Plugin Details

Severity: Critical

ID: 154933

File Name: accellion_fta_9_12_380.nasl

Version: 1.7

Type: remote

Family: CGI abuses

Published: 11/5/2021

Updated: 4/25/2023

Configuration: Enable paranoid mode

Supported Sensors: Nessus

Risk Information

VPR

Risk Factor: High

Score: 7.4

CVSS v2

Risk Factor: Critical

Base Score: 10

Temporal Score: 8.3

Vector: CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C

CVSS Score Source: CVE-2021-27104

CVSS v3

Risk Factor: Critical

Base Score: 9.8

Temporal Score: 9.1

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Temporal Vector: CVSS:3.0/E:F/RL:O/RC:C

Vulnerability Information

CPE: cpe:/h:accellion:secure_file_transfer_appliance

Required KB Items: Settings/ParanoidReport, installed_sw/Accellion Secure File Transfer Appliance

Exploit Available: true

Exploit Ease: Exploits are available

Patch Publication Date: 2/17/2020

Vulnerability Publication Date: 2/17/2020

CISA Known Exploited Vulnerability Due Dates: 11/17/2021

Reference Information

CVE: CVE-2021-27101, CVE-2021-27102, CVE-2021-27103, CVE-2021-27104

Detections

Analytics