PT-2022-3052 · Microsoft+1 · Sql Express 2019+1

Published 2022-06-17 · Updated 2022-06-29 · CVE-2022-34005

Positive Technologies (AI Summary)

CVSS v2.0

10

Critical

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Titan FTP Server NextGen versions prior to 1.2.1050

Description The issue is related to the use of hardcoded credentials for the sa account in the Microsoft SQL Express 2019 instance installed by default during Titan FTP Server NextGen installation. This can allow a remote attacker to elevate their privileges. The vulnerability can be exploited for Remote Code Execution.

Recommendations For versions prior to 1.2.1050, update to version 1.2.1050 or later to resolve the issue. Note that the 1.2.1050 release corrects this vulnerability in new installations, but not in upgrade installations. As a temporary workaround, consider changing the hardcoded password for the sa account on the Microsoft SQL Express 2019 instance. Restrict access to the Microsoft SQL Express 2019 instance to minimize the risk of exploitation.

Fix

Using Hardcoded Credentials

Weakness Enumeration

CWE-259

CWE-798

Related Identifiers

BDU:2022-03721

CVE-2022-34005

Affected Products

Sql Express 2019

Titan Ftp Server Nextgen

References · 6

• https://southrivertech.com/software/nextgen/titanftp/en/relnotes.pdf · Vendor Advisory
• https://safe-surf.ru/upload/VULN/VULN-20220621.9.pdf · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2022-34005 · Security Note
• https://osv.dev/vulnerability/CVE-2022-34005 · Vendor Advisory
• https://bdu.fstec.ru/vul/2022-03721 · Security Note
• https://t.me/cibsecurity/44803 · Telegram Post