CVE-2025-5548: medium-severity vulnerability in FreeFloat FTP Server
FreeFloat FTP Server NOOP Command buffer overflow
Published
38Vexday Risk Score
No sign of exploitation. It has a public proof of concept.
ssvc Attendcvss 6.9epss 15%
from disclosure to weapon9 days
Published on NVDJun 4
1st PoC+9d
exploitation probability
15%top 3% of all CVEs
observed exploitation
nono source reports it
34 public exploit(s)
A vulnerability, which was classified as critical, was found in FreeFloat FTP Server 1.0. Affected is an unknown function of the component NOOP Command Handler. The manipulation leads to buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N
Affected products
FreeFloat · FTP Serverpublic PoCs found — 34
exploitdbwww.exploit-db.com/exploits/52323unverifiedgithubgithub.com/mk017-hk/CVE-2025-5548★ 2githubgithub.com/TheMalwareGuardian/CVE-2025-5548★ 1githubgithub.com/anasrami12/CVE-2025-5548★ 0githubgithub.com/jesusdominguez87/CVE-2025-5548★ 0githubgithub.com/greycat-amc/CVE-2025-5548★ 0githubgithub.com/sudoand3rs0n/CVE-2025-5548★ 0githubgithub.com/alanschmidt81/CVE-2025-5548★ 0githubgithub.com/alfa8sa/CVE-2025-5548★ 0githubgithub.com/elrajiii/CVE-2025-5548★ 0githubgithub.com/Alvarosr16/CVE-2025-5548★ 0githubgithub.com/grospomg/CVE-2025-5548-Exploit-Development★ 0githubgithub.com/FKShield/CVE-2025-5548★ 0githubgithub.com/iamEscri/CVE-2025-5548-FreeFloat-FTP-Buffer-Overflow★ 0githubgithub.com/luisyapura/Analisis-y-Explotacion-de-CVE-2025-5548★ 0githubgithub.com/jgs-developer/CVE-2025-5548★ 0githubgithub.com/raulsineiro/CVE-2025-5548★ 0githubgithub.com/Diego57709/CVE-2025-5548★ 0githubgithub.com/PopClom/CVE-2025-5548★ 0githubgithub.com/x3nt4ur0/CVE-2025-5548★ 0githubgithub.com/CryptoMachio/CVE-2025-5548★ 0githubgithub.com/charlyrr/CVE-2025-5548★ 0githubgithub.com/celiagomezserra/CVE-2025-5548★ 0githubgithub.com/JSantos1990/CVE-2025-5548★ 0githubgithub.com/javyan05/CVE-2025-5548★ 0githubgithub.com/LorenzoPorrasDuque/CVE-2025-5548-POC★ 0githubgithub.com/ZoneToolsCiber/Explotando-FreeFloatFTP-CVE-2025-5548★ 0githubgithub.com/alberto-galindo/CVE-2025-5548★ 0githubgithub.com/gumbita/cve-2025-5548-freefloat-ftp-walkthrough★ 0githubgithub.com/VSvalinX/CVE-2025-5548★ 0githubgithub.com/M4Rc0s-S3c/CVE-2025-5548-FreeFloat-FTP-Lab★ 0githubgithub.com/Victor875/CVE-2025-5548★ 0githubgithub.com/alvarosr/CVE-2025-5548★ 0cve_referencefitoxs.com/exploit/exploit-181bb9e57fbeedb99be8435f014d23b3d936df3ff95db127e57d6832dc48df8f.txtunverified⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.
Related CVEs — FreeFloat FTP Server
In the same product, most dangerous first.
CVE-2012-10023MEDIUMFreeFloat FTP Server USER Command Buffer OverflowEPSS 2.5%CVE-2012-10030CRITICALFreeFloat FTP Server Arbitrary File UploadEPSS 2.2%CVE-2024-0548MEDIUMFreeFloat FTP Server SIZE Command denial of serviceEPSS 1.3%CVE-2025-4791MEDIUMFreeFloat FTP Server HASH Command buffer overflowEPSS 0.8%CVE-2025-4790MEDIUMFreeFloat FTP Server GLOB Command buffer overflowEPSS 0.8%CVE-2025-4789MEDIUMFreeFloat FTP Server LCD Command buffer overflowEPSS 0.8%