CVE-2019-7227

Name of the Vulnerable Software and Affected Versions ABB IDAL FTP server (affected versions not specified)

Description The issue allows an authenticated attacker to traverse to arbitrary directories on the hard disk using the CWD ../ command and then use the FTP server functionality to download and upload files. An unauthenticated attacker can exploit the hardcoded or default credential pair exor/exor to become an authenticated attacker. This can lead to unauthorized access to information and disruption of its integrity by copying and overwriting files.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.