Vulnerabilities > CVE-2021-3331 - Unspecified vulnerability in Winscp

CVSS 10.0 - CRITICAL

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

COMPLETE

Integrity impact

COMPLETE

Availability impact

COMPLETE

network

low complexity

winscp

critical

NVD

Published: 2021-01-27

Updated: 2021-02-04

Summary

WinSCP before 5.17.10 allows remote attackers to execute arbitrary programs when the URL handler encounters a crafted URL that loads session settings. (For example, this is exploitable in a default installation in which WinSCP is the handler for sftp:// URLs.)

Vulnerable Configurations

Part	Description	Count
Application	Winscp Winscp Winscp 2.0 Winscp Winscp 2.1 Winscp Winscp 2.2 Winscp Winscp 2.2.3 Winscp Winscp 2.3 Winscp Winscp 3.0 Winscp Winscp 3.1 Winscp Winscp 3.2 Winscp Winscp 3.2.1 Winscp Winscp 3.3 Winscp Winscp 3.4 Winscp Winscp 3.4.1 Winscp Winscp 3.4.2 Winscp Winscp 3.5 Winscp Winscp 3.5.5 Winscp Winscp 3.5.6 Winscp Winscp 3.6 Winscp Winscp 3.6.1 Winscp Winscp 3.6.5 Winscp Winscp 3.6.6 Winscp Winscp 3.6.7 Winscp Winscp 3.6.8 Winscp Winscp 3.7 Winscp Winscp 3.7.1 Winscp Winscp 3.7.2 Winscp Winscp 3.7.3 Winscp Winscp 3.7.4 Winscp Winscp 3.7.5 Winscp Winscp 3.7.6 Winscp Winscp 3.8 Winscp Winscp 3.8.1 Winscp Winscp 3.8.2 Winscp Winscp 3.8_Beta Winscp Winscp 4.0 Winscp Winscp 4.0.1 Winscp Winscp 4.0.2 Winscp Winscp 4.0.3 Winscp Winscp 4.0.4 Winscp Winscp 4.0.5 Winscp Winscp 4.0.6 Winscp Winscp 4.0.7 Winscp Winscp 4.1 Winscp Winscp 4.1.1 Winscp Winscp 4.1.2 Winscp Winscp 4.1.3 Winscp Winscp 4.1.4 Winscp Winscp 4.1.5 Winscp Winscp 4.1.6 Winscp Winscp 4.1.7 Winscp Winscp 4.1.8 Winscp Winscp 4.1.9 Winscp Winscp 4.2 Winscp Winscp 4.2.1 Winscp Winscp 4.2.2 Winscp Winscp 4.2.3 Winscp Winscp 4.2.4 Winscp Winscp 4.2.5 Winscp Winscp 4.2.6 Winscp Winscp 4.2.7 Winscp Winscp 4.2.8 Winscp Winscp 4.2.9 Winscp Winscp 4.3 Winscp Winscp 4.3.1 Winscp Winscp 4.3.2 Winscp Winscp 4.3.3 Winscp Winscp 4.3.4 Winscp Winscp 4.3.5 Winscp Winscp 4.3.6 Winscp Winscp 4.3.7 Winscp Winscp 4.3.8 Winscp Winscp 4.3.9 Winscp Winscp 4.4 Winscp Winscp 4.4.0 Winscp Winscp 5.0 Winscp Winscp 5.0.1 Winscp Winscp 5.0.2 Winscp Winscp 5.0.3 Winscp Winscp 5.0.4 Winscp Winscp 5.0.5 Winscp Winscp 5.0.6 Winscp Winscp 5.0.7 Winscp Winscp 5.0.8 Winscp Winscp 5.0.9 Winscp Winscp 5.1 Winscp Winscp 5.1.1 Winscp Winscp 5.1.2 Winscp Winscp 5.1.3 Winscp Winscp 5.1.4 Winscp Winscp 5.1.5 Winscp Winscp 5.1.6 Winscp Winscp 5.1.7 Winscp Winscp 5.1.8 Winscp Winscp 5.2 Winscp Winscp 5.2.1 Winscp Winscp 5.2.2 Winscp Winscp 5.2.3 Winscp Winscp 5.2.4 Winscp Winscp 5.2.5 Winscp Winscp 5.2.6 Winscp Winscp 5.2.7 Winscp Winscp 5.5 Winscp Winscp 5.5.1 Winscp Winscp 5.5.2 Winscp Winscp 5.5.3 Winscp Winscp 5.5.4 Winscp Winscp 5.5.5 Winscp Winscp 5.5.6 Winscp Winscp 5.6 Winscp Winscp 5.6.1 Winscp Winscp 5.6.2 Winscp Winscp 5.6.3 Winscp Winscp 5.6.4 Winscp Winscp 5.6.5 Winscp Winscp 5.7 Winscp Winscp 5.7.1 Winscp Winscp 5.7.2 Winscp Winscp 5.7.3 Winscp Winscp 5.7.4 Winscp Winscp 5.7.5 Winscp Winscp 5.7.6 Winscp Winscp 5.7.7 Winscp Winscp 5.8 Winscp Winscp 5.8.1 Winscp Winscp 5.8.2 Winscp Winscp 5.8.3 Winscp Winscp 5.8.4 Winscp Winscp 5.9 Winscp Winscp 5.9.1 Winscp Winscp 5.9.2 Winscp Winscp 5.9.3 Winscp Winscp 5.9.4 Winscp Winscp 5.9.5 Winscp Winscp 5.9.6 Winscp Winscp 5.10.1 Winscp Winscp 5.10.2 Winscp Winscp 5.10.3 Winscp Winscp 5.10.4 Winscp Winscp 5.11 Winscp Winscp 5.11.1 Winscp Winscp 5.11.2 Winscp Winscp 5.11.3 Winscp Winscp 5.12 Winscp Winscp 5.12.1 Winscp Winscp 5.12.2 Winscp Winscp 5.13 Winscp Winscp 5.13.1 Winscp Winscp 5.13.2 Winscp Winscp 5.13.3 Winscp Winscp 5.13.4 Winscp Winscp 5.13.5 Winscp Winscp 5.13.6 Winscp Winscp 5.13.7 Winscp Winscp 5.13.8 Winscp Winscp 5.13.9 Winscp Winscp 5.14 Winscp Winscp 5.14.1 Winscp Winscp 5.14.2 Winscp Winscp 5.14.3 Winscp Winscp 5.14.4 Winscp Winscp 5.14.5 Winscp Winscp 5.15 Winscp Winscp 5.15.1 Winscp Winscp 5.15.2 Winscp Winscp 5.15.3 Winscp Winscp 5.15.4 Winscp Winscp 5.17.8 Winscp Winscp 5.17.9	167

Summary

Vulnerable Configurations

References