CVE-2023-40044

In WS_FTP Server versions prior to 8.7.4 and 8.8.2, a pre-authenticated attacker could leverage a .NET deserialization vulnerability in the Ad Hoc Transfer module to execute remote commands on the underlying WS_FTP Server operating system.

• CWE-502
• CWE-502

• http://packetstormsecurity.com/files/174917/Progress-Software-WS_FTP-Unauthenticated-Remote-Code-Execution.htmlExploit, Third Party Advisory, VDB Entry
• https://attackerkb.com/topics/bn32f9sNax/cve-2023-40044Third Party Advisory
• https://censys.com/cve-2023-40044/Third Party Advisory
• https://community.progress.com/s/article/WS-FTP-Server-Critical-Vulnerability-September-2023Vendor Advisory
• https://www.assetnote.io/resources/research/rce-in-progress-ws-ftp-ad-hoc-via-iis-http-modules-cve-2023-40044Exploit, Third Party Advisory
• https://www.progress.com/ws_ftpProduct
• https://www.rapid7.com/blog/post/2023/09/29/etr-critical-vulnerabilities-in-ws_ftp-server/Broken Link, Third Party Advisory
• https://www.theregister.com/2023/10/02/ws_ftp_update/Press/Media Coverage, Third Party Advisory
• http://packetstormsecurity.com/files/174917/Progress-Software-WS_FTP-Unauthenticated-Remote-Code-Execution.htmlExploit, Third Party Advisory, VDB Entry
• https://attackerkb.com/topics/bn32f9sNax/cve-2023-40044Third Party Advisory
• https://censys.com/cve-2023-40044/Third Party Advisory
• https://community.progress.com/s/article/WS-FTP-Server-Critical-Vulnerability-September-2023Vendor Advisory
• https://www.assetnote.io/resources/research/rce-in-progress-ws-ftp-ad-hoc-via-iis-http-modules-cve-2023-40044Exploit, Third Party Advisory
• https://www.progress.com/ws_ftpProduct
• https://www.rapid7.com/blog/post/2023/09/29/etr-critical-vulnerabilities-in-ws_ftp-server/Broken Link, Third Party Advisory
• https://www.theregister.com/2023/10/02/ws_ftp_update/Press/Media Coverage, Third Party Advisory
• https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-40044US Government Resource

Published

Sep 27, 2023

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-40039An issue was discovered on ARRIS TG852G, TG862G, and TG1672G…9.8
• CVE-2023-4004A use-after-free flaw was found in the Linux kernel's netfil…7.8
• CVE-2023-40040An issue was discovered in the MyCrops HiGrade "THC Testing …5.3
• CVE-2023-40041TOTOLINK T10_v2 5.9c.5061_B20200511 has a stack-based buffer…9.8
• CVE-2023-40042TOTOLINK T10_v2 5.9c.5061_B20200511 has a stack-based buffer…9.8
• CVE-2023-40043 In Progress MOVEit Transfer versions released before 2021.1…7.2
• CVE-2023-40045 In WS_FTP Server versions prior to 8.7.4 and 8.8.2, a r…6.1
• CVE-2023-40046 In WS_FTP Server versions prior to 8.7.4 and 8.8.2, a S…7.2
• CVE-2023-40047 In WS_FTP Server version prior to 8.8.2, a stored cross-s…4.8
• CVE-2023-40048 In WS_FTP Server version prior to 8.8.2, the WS_FTP Ser…6.5
• CVE-2023-40049 In WS_FTP Server version prior to 8.8.2, an unauthentic…5.3
• CVE-2023-4005Insufficient Session Expiration in GitHub repository fossbil…9.8