Summary
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Gladinet Triofox ausnutzen, um beliebigen Code auszuführen, einen Denial-of-Service-Zustand herbeizuführen und Informationen offenzulegen.
Product
Triofox Server ist eine Softwarelösung, die Dateifreigabe und -zugriff über verschiedene Plattformen hinweg ermöglicht und dabei bestehende Dateiserverinfrastrukturen integriert.
Vulnerabilities 6
-
Critical 9.8
Gladinet Triofox Stack-based Buffer Overflow in WOSDefaultHttpModule.dll
A stack-based buffer overflow condition exists in WOSDefaultHttpModule.dll when processing a long URL path starting with /woshome
-
Critical 9.8
Gladinet Triofox Stack-based Buffer Overflow in WOSDeviceDropFolder.dll
A stack-based buffer overflow condition exists in WOSDeviceDropFolder.dll when processing a long URL path starting with /resources:
-
Critical 9.8
Gladinet Triofox Missing Authentication for Critical Functions
Gladinet Triofox Cloud Server Agent Access Service (GladServerAgentService.exe) listens on TCP port 7878 and processes remote HTTP messages with URL paths starting with /resources, /status, /sysinfo, /woshome, /Settings, /schedule, or /DavCache.
-
High 7.5
Gladinet Triofox WOSHttpStatusModule.dll NULL Function Pointer Call DoS
When processing a request with a URL path starting with /status or /sysinfo, WOSHttpStatusModule.dll is to be loaded to handle such URL patterns. The WOSBin_LoadHttpModule function in the dll would be called to set up a "module" object for that module. Howeve…
-
High 7.5
Gladinet Triofox Unchecked Return Value to NULL Pointer Dereference DOS
Function calls to WOSCommonUtil.dll!WOSSysInfoGetDeviceInterface() in various DLLs (i.e., WOSProfileMgrModule.dll, WOSWebDavModule.dll) can return a NULL pointer (i.e., when no user is logged into the Triofox Server Agent Management Console). The returned NUL…
-
High 7.5
Gladinet Triofox Path Traversal in WOSDefaultHttpModule.dll
A path traversal vulnerability exists in WOSDefaultHttpModule.dll when processing a URL path starting with /woshome
Revision history
-
#1
Initiale Fassung
References
-
Tenable Research Advisory TRA-2026-45: Gladinet Triofox Multiple Vulnerabilities vom 2026-05-27
https://de.tenable.com/security/research/tra-2026-45