CVE-2021-41635

Name of the Vulnerable Software and Affected Versions MELAG FTP Server version 2.2.0.4

Description The issue allows remote attackers to abuse misconfigurations or vulnerabilities with administrative access over the entire host system when MELAG FTP Server is installed as a Windows service and run as the SYSTEM user.

Recommendations For MELAG FTP Server version 2.2.0.4, consider running the service under a less privileged user account to minimize the risk of exploitation. Additionally, review and rectify any misconfigurations to prevent abuse of vulnerabilities. At the moment, there is no information about a newer version that contains a fix for this vulnerability.