← Database

CVE-2009-4646

CRITICAL CVSS: 9.0 Published: 2010-02-19 Modified: 2026-06-16

Description

Static code injection vulnerability in the administrative web interface in Accellion Secure File Transfer Appliance allows remote authenticated administrators to inject arbitrary shell commands by appending them to a request to update the SNMP public community string.

Affected Platforms

Accellion Secure File Transfer Appliance

Weakness Type

CWE-94

References