Every CVESearch/Get API key

CVE-2025-5548

FreeFloat FTP Server NOOP Command buffer overflow

6.9 MediumPublic exploit

CVE-2025-5548 is a medium vulnerability (CVSS 6.9) in Freefloat Ftp Server, published June 4, 2025. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 16.0%, the 96th percentile. No source names a fixed version.

What does this mean?
Severity
6.9 MediumCVSS 4.0, CVE List
Exploit chance
16.0%EPSS, 96th percentile
Exploitation
None known38 public exploits
Fixed in
No fix listedNo source names one

Description

A vulnerability, which was classified as critical, was found in FreeFloat FTP Server 1.0. Affected is an unknown function of the component NOOP Command Handler. The manipulation leads to buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
Low
Privileges needed
None
User interaction
None

What an attacker can affect

Confidentiality
Low
Integrity
Low
Availability
Low

Exploit likelihood

16.0%Up 16.0 points since Jun 4, 2025
90%50%10%1%

Affected products

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
SourceLinkDate
Exploit-DBFreefloat FTP Server 1.0 - Remote Buffer Overflow2025-06-13
PoC in GitHubTheMalwareGuardian/CVE-2025-55482026-03-09
PoC in GitHubJSantos1990/CVE-2025-55482026-03-12
PoC in GitHubalanschmidt81/CVE-2025-55482026-03-12
PoC in GitHubcharlyrr/CVE-2025-55482026-03-13
PoC in GitHubjavyan05/CVE-2025-55482026-03-13
PoC in GitHubLorenzoPorrasDuque/CVE-2025-5548-POC2026-03-14
PoC in GitHubZoneToolsCiber/Explotando-FreeFloatFTP-CVE-2025-55482026-03-14
PoC in GitHubalfa8sa/CVE-2025-55482026-03-14
PoC in GitHubanasrami12/CVE-2025-55482026-03-14
Show 16 moreShow less
Public exploits
SourceLinkDate
PoC in GitHubceliagomezserra/CVE-2025-55482026-03-14
PoC in GitHubVictor875/CVE-2025-55482026-03-15
PoC in GitHubiamEscri/CVE-2025-5548-FreeFloat-FTP-Buffer-Overflow2026-03-15
PoC in GitHubmk017-hk/CVE-2025-55482026-03-15
PoC in GitHubDiego57709/CVE-2025-55482026-03-16
PoC in GitHubjgs-developer/CVE-2025-55482026-03-16
PoC in GitHubluisyapura/Analisis-y-Explotacion-de-CVE-2025-55482026-03-16
PoC in GitHubraulsineiro/CVE-2025-55482026-03-16
PoC in GitHubPopClom/CVE-2025-55482026-03-17
PoC in GitHubalberto-galindo/CVE-2025-55482026-03-17
PoC in GitHubalvarosr/CVE-2025-55482026-03-17
PoC in GitHubelrajiii/CVE-2025-55482026-03-17
PoC in GitHubFKShield/CVE-2025-55482026-03-18
PoC in GitHubgumbita/cve-2025-5548-freefloat-ftp-walkthrough2026-03-18
PoC in GitHubjesusdominguez87/CVE-2025-55482026-03-18
PoC in GitHubx3nt4ur0/CVE-2025-55482026-03-18

What each source reports

CVE List Score used6.9

FreeFloat FTP Server NOOP Command buffer overflow

A vulnerability, which was classified as critical, was found in FreeFloat FTP Server 1.0. Affected is an unknown function of the component NOOP Command Handler. The manipulation leads to buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.

Record
CVE-2025-5548
CVSS 4.0
6.9 MediumCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N
CVSS 3.1
7.3 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
CVSS 3.0
7.3 HighCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
CVSS 2.0
7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P
Weakness
CWE-120, CWE-119
Updated
2026-11-02
EUVDEUVD-2025-168156.9

A vulnerability, which was classified as critical, was found in FreeFloat FTP Server 1.0. Affected is an unknown function of the component NOOP Command Handler. The manipulation leads to buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.

Record
EUVD-2025-16815
CVSS 4.0
6.9 MediumCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N
Updated
2026-11-02
GitHub AdvisoriesGHSA-xc4j-qcg6-2m4x6.9

A vulnerability, which was classified as critical, was found in FreeFloat FTP Server 1.0....

A vulnerability, which was classified as critical, was found in FreeFloat FTP Server 1.0. Affected is an unknown function of the component NOOP Command Handler. The manipulation leads to buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.

Record
GHSA-xc4j-qcg6-2m4x
CVSS 4.0
6.9 MediumCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
CVSS 3.1
7.3 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
Weakness
CWE-119
Updated
2026-11-02
NVD6.9

A vulnerability, which was classified as critical, was found in FreeFloat FTP Server 1.0. Affected is an unknown function of the component NOOP Command Handler. The manipulation leads to buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.

Record
CVE-2025-5548
CVSS 4.0
6.9 MediumCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
CVSS 3.1
7.3 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0
7.5 HighAV:N/AC:L/Au:N/C:P/I:P/A:P
Weakness
CWE-119, CWE-120
Updated
2026-11-02

History

History
RecordedChangedSources
exploits, exploits_more
first indexedCVE List, EUVD, Exploit-DB, GitHub Advisories, NVD, PoC in GitHub

Dates are when Every CVE recorded each change. Upstream dates may differ.

References

This page doesn't list everything

The full exploit list has 12 more links.

PagesAll vulnerabilitiesBrowseDocsSourcesGuideGet API key
MoveEnter Open