CVE-2025-3680: falha de média gravidade em PCMan FTP Server
PCMan FTP Server LANG Command buffer overflow
Publicada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
13Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 6.9epss 0.8%
A vulnerability has been found in PCMan FTP Server 2.0.7 and classified as critical. Affected by this vulnerability is an unknown functionality of the component LANG Command Handler. The manipulation leads to buffer overflow. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N
Produtos afetados
PCMan · FTP ServerCVEs relacionadas — PCMan FTP Server
No mesmo produto, das mais perigosas para as menos.
CVE-2025-4255MEDIUMPCMan FTP Server RMD Command buffer overflowEPSS 2.2%CVE-2025-4871MEDIUMPCMan FTP Server REST Command buffer overflowEPSS 1.7%CVE-2021-4432MEDIUMPCMan FTP Server USER Command denial of serviceEPSS 1.3%CVE-2024-0732MEDIUMPCMan FTP Server STOR Command denial of serviceEPSS 1.1%CVE-2024-0731MEDIUMPCMan FTP Server PUT Command denial of serviceEPSS 1.1%CVE-2024-58299CRITICALPCMan FTP Server 2.0 Remote Buffer Overflow via 'pwd' CommandEPSS 0.9%