T1071.002Command and Control
File Transfer Protocols
Adversaries may communicate using application layer protocols associated with transferring files to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server. Protocols such as SMB, FTP, FTPS, and TFTP that transfer files may be very…
CVEs1
In CISA KEVThe US Cybersecurity and Infrastructure Security Agency’s list of Known Exploited Vulnerabilities. A CVE is added when CISA has evidence that attackers are using it.1
Reports0
CVEs linked to File Transfer Protocols
1 CVE, by priority. Each link shows its badge.- CVE-2023-40044Progress WS_FTP Server Deserialization of Untrusted Data VulnerabilityProgress · WS_FTP ServerKEVRansomwarePublic exploitHigh · 8.8T1059Command and Scripting InterpreterT1202Indirect Command Execution+1 moreMITRE CTID mapping of the KEV entry · primary impact90.4%Top 0.2%79.1priority