CVE-2020-6857: Taskautomation Carbonftp

Medium severity, CVSS 5.5. EPSS: 1% chance of exploitation in the next 30 days.

CarbonFTP v1.4 uses insecure proprietary password encryption with a hard-coded weak encryption key. The key for local FTP server passwords is hard-coded in the binary.

Affected products

• Taskautomation Carbonftp: version 1.4 only

Published 2020-01-21. Last modified 2026-06-17.