CVE-2021-41637: Melag FTP Server

High severity, CVSS 7.1. EPSS: 0.3% chance of exploitation in the next 30 days.

Weak access control permissions in MELAG FTP Server 2.2.0.4 allow the "Everyone" group to read the local FTP configuration file, which includes among other information the unencrypted passwords of all FTP users.

Affected products

• Melag FTP Server: version 2.2.0.4 only

Published 2022-06-24. Last modified 2026-06-17.