VDB
BDU%3A2025-08471
BDU%3A2025-08471
PUBLISHED
CVSS 10 CRITICAL
Уязвимость веб-интерфейса FTP-сервера Wing, позволяющая нарушителю повысить свои привилегии и выполнить произвольный код
Risk Scores
CVSS 3.1
10
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Wing FTP Software | Wing FTP Server | |
| wftpserver | Wing FTP Server | 0 |
| wftpserver | wing_ftp_server | 0 |
Timeline
- May 29, 2018 PoC Published
- Jun 30, 2025 PoC Published
- Jun 30, 2025 PoC Published
- Jun 30, 2025 PoC Published
- Jul 1, 2025 PoC Published
- Jul 1, 2025 PoC Published
- Jul 1, 2025 PoC Published
- Jul 1, 2025 PoC Published
- Jul 2, 2025 PoC Published
- Jul 2, 2025 PoC Published
- Jul 2, 2025 PoC Published
- Jul 3, 2025 PoC Published
References
- https://www.wftpserver.com url
- https://www.rcesecurity.com/2025/06/what-the-null-wing-ftp-server-rce-cve-2025-47812/ url
- https://www.vicarius.io/vsociety/posts/cve-2025-47812-mitigation-script-remote-code-execution-vulnerability-in-wing-ftp-server url
- https://www.vicarius.io/vsociety/posts/cve-2025-47812-detection-script-remote-code-execution-vulnerability-in-wing-ftp-server url
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-47812 url
- https://github.com/4m3rr0r/CVE-2025-47812-poc url
- https://www.huntress.com/blog/wing-ftp-server-remote-code-execution-cve-2025-47812-exploited-in-wild url
- https://www.wftpserver.com/download.htm advisory