Read the docs

Southrivertech

Records21All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical2CVSS 9.0–10.0
CVSS high6CVSS 7.0–8.9

Exploited now

Southrivertech records in CISA KEV

No Southrivertech vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Records

4 records in Titan Sftp Server · all components

Priority MEDIUM 64

Lack of sufficient path validation in South River Technologies' Titan MFT and Titan SFTP servers on Windows and Linux allows an authenticated attacker with administrative privileges to read any file on the filesystem via…

CVSS 3.1MEDIUM 6.5 Network High privileges No interaction EPSS 0.00998 Published 2023-10-16 No fix listed CWE-22
Priority MEDIUM 45

Insufficient path validation when extracting a zip archive in South River Technologies' Titan MFT and Titan SFTP servers on Windows and Linux allows an authenticated attacker to write a file to any location on the filesy…

CVSS 3.1CRITICAL 9.1 Network High privileges No interaction EPSS 0.01719 Published 2023-10-16 No fix listed CWE-22
Priority MEDIUM 43

A session fixation vulnerability in South River Technologies' Titan MFT and Titan SFTP servers on Linux and Windows allows an attacker to bypass the server's authentication if they can trick an administrator into authori…

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01384 Published 2023-10-16 No fix listed CWE-384
Priority LOW 21

Lack of sufficient path validation in South River Technologies' Titan MFT and Titan SFTP servers on Linux allows an authenticated attacker to get the size of an arbitrary file on the filesystem using path traversal in th…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00773 Published 2023-10-16 No fix listed CWE-22
Open these records in search →