CVE-2023-47174
31.10.2023, 04:15
Thorn SFTP gateway 3.4.x before 3.4.4 uses Pivotal Spring Framework for Java deserialization of untrusted data, which is not supported by Pivotal, a related issue to CVE-2016-1000027. Also, within the specific context of Thorn SFTP gateway, this leads to remote code execution.Enginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| thorntech | sftp_gateway_firmware | 3.4.0 ≤ 𝑥 < 3.4.4 |
𝑥
= Vulnerable software versions
Early Detection
Affected products identified ahead of NVD analysis through intelligence sources.
| Vendor | Product | Version | Source |
|---|---|---|---|
| thorntech | sftp_gateway | 3.4x ≤ 𝑥 < 3.4.4 | ADP |
Common Weakness Enumeration