Unrated severityNVD Advisory· Published Feb 19, 2010· Updated Jun 16, 2026
CVE-2009-4646
CVE-2009-4646
Description
Static code injection vulnerability in the administrative web interface in Accellion Secure File Transfer Appliance allows remote authenticated administrators to inject arbitrary shell commands by appending them to a request to update the SNMP public community string.
Affected products
2cpe:2.3:h:accellion:secure_file_transfer_appliance:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:h:accellion:secure_file_transfer_appliance:*:*:*:*:*:*:*:*
- (no CPE)
Patches
Vulnerability mechanics
References
2- www.portcullis-security.com/339.phpnvdExploit
- secunia.com/advisories/38538nvdVendor Advisory
News mentions
0No linked articles in our index yet.