Vulnerability · Published Jun 4, 2025 · Assigned by VulDB

CVE-2025-5548FreeFloat FTP Server NOOP Command buffer overflow

High 7.3

In plain English

A high-severity buffer overflow in FTP Server from FreeFloat. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 15.9% (higher than 97% of all known vulnerabilities). Ready-made attack tooling exists: public proof-of-concept code.

Severity (CVSS 3.1)7.3High

Exploit odds (30 days)15.9%top 3.1% of all CVEs

Exploited in the wildNo reportsCISA SSVC: none

Attack tooling1Public PoC

Official description

A vulnerability, which was classified as critical, was found in FreeFloat FTP Server 1.0. Affected is an unknown function of the component NOOP Command Handler. The manipulation leads to buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.

Affected products (as reported)

Vendor	Product	Versions
FreeFloat	FTP Server	1.0

Weakness: CWE-120, CWE-119 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

References

VDB-310998 | FreeFloat FTP Server NOOP Command buffer overflow vdb-entry
VDB-310998 | CTI Indicators (IOB, IOC) signature, permissions-required
Submit #586982 | FreeFloat FTP Server 1.0 Buffer Overflow third-party-advisory
https://fitoxs.com/exploit/exploit-181bb9e57fbeedb99be8435f014d23b3d936df3ff95db127e57d6832dc48df8f.txt broken-link, exploit