Wing FTP Server Lua Admin Console Privilege Escalation Vulnerability

A critical vulnerability allowing unauthorized privilege escalation has been identified in Wing FTP Server versions through 7.4.3. The issue arises from an unknown function in the Lua Admin Console component, enabling remote execution with elevated privileges. Although the vulnerability is challenging to exploit, it can be addressed by upgrading to version 7.4.4.

Impact

Exploitation of this vulnerability could lead to unauthorized execution of commands or scripts with elevated privileges, potentially allowing an attacker to perform actions or access resources that are normally restricted.

Remediation

Users are advised to upgrade to Wing FTP Server version 7.4.4, which addresses this vulnerability.