Critical severity9.8NVD Advisory· Published Oct 31, 2023· Updated Jun 17, 2026
CVE-2023-47174
CVE-2023-47174
Description
Thorn SFTP gateway 3.4.x before 3.4.4 uses Pivotal Spring Framework for Java deserialization of untrusted data, which is not supported by Pivotal, a related issue to CVE-2016-1000027. Also, within the specific context of Thorn SFTP gateway, this leads to remote code execution.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3- Range: <3.4.4
- Thorn/SFTP gatewaydescription
- cpe:2.3:o:thorntech:sftp_gateway_firmware:*:*:*:*:*:*:*:*Range: >=3.4.0,<3.4.4
Patches
Vulnerability mechanics
References
1News mentions
0No linked articles in our index yet.