CVE-2025-5548

HIGH

FreeFloat FTP Server 1.0 - Buffer Overflow

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 28 public exploits for CVE-2025-5548. PoCs published by Fernando Mengali, XiaomingX, mk017-hk.

AI-analyzed exploit summary This exploit targets a remote buffer overflow in Freefloat FTP Server 1.0 by sending a maliciously crafted NOOP command with a payload that overwrites EIP and executes shellcode via a JMP ESP instruction in kernel32.dll.

Description

A vulnerability, which was classified as critical, was found in FreeFloat FTP Server 1.0. Affected is an unknown function of the component NOOP Command Handler. The manipulation leads to buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.

Exploits (28)

exploitdb WORKING POC
by Fernando Mengali · textremotemultiple
https://www.exploit-db.com/exploits/52323

This exploit targets a remote buffer overflow in Freefloat FTP Server 1.0 by sending a maliciously crafted NOOP command with a payload that overwrites EIP and executes shellcode via a JMP ESP instruction in kernel32.dll.

Classification
Working Poc 95%
Attack Type
Rce
Complexity
Moderate
Reliability
Reliable
Target: Freefloat FTP Server 1.0
No auth needed
Prerequisites: Network access to the target FTP server · Target running Freefloat FTP Server 1.0 on Windows XP SP3
devstral-2 · analyzed Feb 16, 2026 Full analysis →
github WORKING POC 10 stars
by XiaomingX · pythonpoc
https://github.com/XiaomingX/data-cve-poc-py-v1/tree/main/2025/CVE-2025-5548

This repository contains a functional proof-of-concept exploit for CVE-2025-5548, a buffer overflow vulnerability in FreeFloat FTP Server 1.0 triggered by the NOOP command. The PoC script demonstrates the vulnerability by sending an oversized payload to crash the service.

Classification
Working Poc 95%
Attack Type
Dos
Complexity
Trivial
Reliability
Reliable
Target: FreeFloat FTP Server 1.0
No auth needed
Prerequisites: Network access to the target FTP service
devstral-2 · analyzed Mar 16, 2026 Full analysis →
nomisec WORKING POC 2 stars
by mk017-hk · poc
https://github.com/mk017-hk/CVE-2025-5548

This repository contains a functional proof-of-concept exploit for CVE-2025-5548, a buffer overflow vulnerability in FreeFloat FTP Server 1.0 triggered by the NOOP command. The PoC demonstrates memory corruption via an oversized payload, leading to potential DoS or RCE.

Classification
Working Poc 95%
Attack Type
Dos
Complexity
Trivial
Reliability
Reliable
Target: FreeFloat FTP Server 1.0
No auth needed
Prerequisites: Network access to the target FTP service
devstral-2 · analyzed Mar 16, 2026 Full analysis →
github WRITEUP 2 stars
by adminlove520 · pythonpoc
https://github.com/adminlove520/CVE-Poc_All_in_One/tree/main/2025/CVE-2025-5548

This repository provides a detailed technical writeup of CVE-2025-5548, a stack buffer overflow vulnerability in a legacy FTP service. It includes step-by-step exploitation methodology, bad character analysis, and mitigation recommendations, but lacks functional exploit code.

Classification
Writeup 95%
Attack Type
Rce
Complexity
Moderate
Reliability
Theoretical
Target: Legacy FTP service (unspecified version)
No auth needed
Prerequisites: Legacy FTP service with vulnerable NOOP command handling · Network access to the FTP service
devstral-2 · analyzed Mar 14, 2026 Full analysis →
nomisec WRITEUP
by CryptoMachio · poc
https://github.com/CryptoMachio/CVE-2025-5548

This repository provides a detailed technical analysis of CVE-2025-5548, a stack-based buffer overflow in FreeFloat FTP Server v1.0. It includes a comprehensive walkthrough of the vulnerability, from lab setup to exploit development, with tools like Immunity Debugger and Ghidra.

Classification
Writeup 95%
Attack Type
Rce
Complexity
Moderate
Reliability
Reliable
Target: FreeFloat FTP Server v1.0
No auth needed
Prerequisites: Windows 11 Pro 25H2 · FreeFloat FTP Server v1.0 · Immunity Debugger · Ghidra · Python 2.7/3
devstral-2 · analyzed Apr 10, 2026 Full analysis →
nomisec WRITEUP
by greycat-amc · poc
https://github.com/greycat-amc/CVE-2025-5548

This repository provides a detailed technical writeup for setting up a lab environment to analyze and exploit CVE-2025-5548. It includes step-by-step instructions for installing necessary tools such as Python, Java, IDEs, debuggers, and disassemblers, but does not contain actual exploit code.

Classification
Writeup 90%
Attack Type
Other
Complexity
Moderate
Reliability
Theoretical
Target: N/A
No auth needed
Prerequisites: Windows 11 VM · Python 3.14.3 · Java JDK · Visual Studio Code · Notepad++ · Debugging tools · Disassemblers
devstral-2 · analyzed Apr 09, 2026 Full analysis →
nomisec WRITEUP
by Alvarosr16 · poc
https://github.com/Alvarosr16/CVE-2025-5548

This repository provides a detailed technical analysis of CVE-2025-5548, focusing on the vulnerable function in FreeFloat FTP Server that uses unsafe `strcpy` operations, leading to a buffer overflow. It includes static and dynamic analysis steps, tool setup, and identification of the exploit path.

Classification
Writeup 95%
Attack Type
Rce
Complexity
Moderate
Reliability
Theoretical
Target: FreeFloat FTP Server 1.0
No auth needed
Prerequisites: FreeFloat FTP Server 1.0 · Immunity Debugger · IDA Pro
devstral-2 · analyzed Mar 19, 2026 Full analysis →
nomisec WRITEUP
by grospomg · poc
https://github.com/grospomg/CVE-2025-5548-Exploit-Development

This repository provides a detailed technical walkthrough of exploit development for CVE-2025-5548, focusing on buffer overflow exploitation in FreeFloat FTP Server 1.0. It includes step-by-step documentation of environment setup, fuzzing, crash analysis, and payload development, with Python scripts for each phase.

Classification
Writeup 95%
Attack Type
Rce
Complexity
Moderate
Reliability
Reliable
Target: FreeFloat FTP Server 1.0
No auth needed
Prerequisites: Python · Immunity Debugger · Mona · Vulnserver · FreeFloat FTP Server 1.0
devstral-2 · analyzed Mar 19, 2026 Full analysis →
nomisec WRITEUP
by gumbita · poc
https://github.com/gumbita/cve-2025-5548-freefloat-ftp-walkthrough

This repository provides a detailed technical walkthrough of CVE-2025-5548 in FreeFloat FTP Server 1.0, including documentation of the vulnerability analysis, exploitation steps, and supporting scripts. It focuses on educational and methodological aspects rather than a direct exploit.

Classification
Writeup 95%
Attack Type
Other
Complexity
Moderate
Reliability
Theoretical
Target: FreeFloat FTP Server 1.0
No auth needed
Prerequisites: FreeFloat FTP Server 1.0 · Python · Debugging tools (e.g., Immunity, Ghidra)
devstral-2 · analyzed Mar 19, 2026 Full analysis →
nomisec WRITEUP
by FKShield · poc
https://github.com/FKShield/CVE-2025-5548

This repository provides a detailed technical writeup on setting up a research environment for CVE-2025-5548, including tooling, frameworks, and debugging setups. It does not contain exploit code but offers in-depth guidance on infrastructure and tooling required for vulnerability research.

Classification
Writeup 95%
Attack Type
Other
Complexity
Moderate
Reliability
Theoretical
Target: N/A
No auth needed
Prerequisites: Windows 11 Pro · Windows SDK · Python 3.x and 2.7 · Java JDK · IDA Free · Ghidra · Immunity Debugger · Mona.py
devstral-2 · analyzed Mar 19, 2026 Full analysis →
nomisec WRITEUP
by x3nt4ur0 · poc
https://github.com/x3nt4ur0/CVE-2025-5548

This repository provides a detailed technical writeup and step-by-step methodology for exploiting CVE-2025-5548, focusing on buffer overflow techniques in FreeFloat FTP Server. It includes scripts for fuzzing, offset discovery, and payload generation, but does not contain a complete functional exploit.

Classification
Writeup 95%
Attack Type
Rce
Complexity
Moderate
Reliability
Theoretical
Target: FreeFloat FTP Server
No auth needed
Prerequisites: Python 3 · Immunity Debugger · Mona.py · Ghidra · Vulnserver or FreeFloat FTP Server
devstral-2 · analyzed Mar 19, 2026 Full analysis →
nomisec WRITEUP
by charlyrr · poc
https://github.com/charlyrr/CVE-2025-5548

This repository provides a detailed technical walkthrough for setting up a lab environment and exploiting CVE-2025-5548, a stack buffer overflow in FreeFloat FTP Server. It includes tooling setup, debugging techniques, and step-by-step exploitation methodology.

Classification
Writeup 95%
Attack Type
Rce
Complexity
Moderate
Reliability
Reliable
Target: FreeFloat FTP Server
No auth needed
Prerequisites: Windows 11 VM · Immunity Debugger · Mona.py · Python · Ghidra/IDA Free
devstral-2 · analyzed Mar 19, 2026 Full analysis →
nomisec WRITEUP
by JSantos1990 · poc
https://github.com/JSantos1990/CVE-2025-5548

This repository provides a detailed technical writeup and step-by-step guide for exploiting CVE-2025-5548, a buffer overflow vulnerability in FreeFloat FTP Server 1.0. It includes environment setup instructions, fuzzing scripts, and exploitation steps but does not contain a complete functional exploit.

Classification
Writeup 95%
Attack Type
Rce
Complexity
Moderate
Reliability
Theoretical
Target: FreeFloat FTP Server 1.0
No auth needed
Prerequisites: Windows 11 VM · Python 3.14.3 · JDK 25 · Ghidra · Immunity Debugger · Mona.py
devstral-2 · analyzed Mar 19, 2026 Full analysis →
nomisec WORKING POC
by PopClom · poc
https://github.com/PopClom/CVE-2025-5548

The repository contains functional Python scripts for exploiting a buffer overflow vulnerability in FreeFloat FTP Server v1.0 via the NOOP command. It includes environment setup instructions and fuzzing scripts to trigger the vulnerability.

Classification
Working Poc 95%
Attack Type
Rce
Complexity
Moderate
Reliability
Reliable
Target: FreeFloat FTP Server v1.0
No auth needed
Prerequisites: Python 3 · Immunity Debugger · mona.py · FreeFloat FTP Server v1.0
devstral-2 · analyzed Mar 18, 2026 Full analysis →
nomisec WORKING POC
by luisyapura · poc
https://github.com/luisyapura/Analisis-y-Explotacion-de-CVE-2025-5548

This repository contains a functional exploit for CVE-2025-5548, targeting FreeFloatFTPServer 1.0. It includes detailed analysis, environment setup, and multiple Python scripts for fuzzing, offset discovery, and shellcode execution.

Classification
Working Poc 95%
Attack Type
Rce
Complexity
Moderate
Reliability
Reliable
Target: FreeFloatFTPServer 1.0
No auth needed
Prerequisites: FreeFloatFTPServer 1.0 installed · Immunity Debugger · Mona.py · Python 2.7.1
devstral-2 · analyzed Mar 18, 2026 Full analysis →
nomisec WRITEUP
by elrajiii · poc
https://github.com/elrajiii/CVE-2025-5548

This repository provides a detailed lab setup guide for exploiting a buffer overflow vulnerability, including tool installation and configuration instructions. It does not contain actual exploit code but offers a comprehensive walkthrough for setting up an environment to develop and test exploits.

Classification
Writeup 90%
Attack Type
Other
Complexity
Moderate
Reliability
Theoretical
Target: Freefloat FTP Server
No auth needed
Prerequisites: Java · Python · Git · Netcat · IDEs (Notepad++, VSCode, PyCharm) · Debuggers (IDA, Immunity Debugger, Mona.py) · Vulnerable Software (Freefloat FTP Server)
devstral-2 · analyzed Mar 17, 2026 Full analysis →
nomisec WRITEUP
by alberto-galindo · poc
https://github.com/alberto-galindo/CVE-2025-5548

This repository provides a detailed technical writeup and environment setup guide for exploiting CVE-2025-5548, a stack-based buffer overflow in FreeFloat FTP Server 1.0. It includes tooling requirements, debugging setup, and automation scripts for vulnerability research.

Classification
Writeup 90%
Attack Type
Rce
Complexity
Moderate
Reliability
Theoretical
Target: FreeFloat FTP Server 1.0
No auth needed
Prerequisites: Python 2.7 and 3.11 · Immunity Debugger · x64dbg · Ghidra/IDA · Mona.py · WinAFL
devstral-2 · analyzed Mar 17, 2026 Full analysis →
nomisec WRITEUP
by raulsineiro · poc
https://github.com/raulsineiro/CVE-2025-5548

This repository provides a technical analysis and proof-of-concept walkthrough for CVE-2025-5548, focusing on root cause analysis, exploit primitive development, and mitigation analysis. It includes detailed documentation for setting up a laboratory environment for binary analysis and exploitation research.

Classification
Writeup 90%
Attack Type
Other
Complexity
Complex
Reliability
Theoretical
Target: N/A
No auth needed
Prerequisites: Windows 10/11 (Virtual Machine recommended) · Isolated Virtual Network · Ghidra · IDA Pro · Immunity Debugger · Mona.py · Python/PyCharm · Java/VS Code · Vulnserver / FreeFloat FTP
devstral-2 · analyzed Mar 17, 2026 Full analysis →
nomisec STUB
by jgs-developer · poc
https://github.com/jgs-developer/CVE-2025-5548

The repository contains minimal content with no actual exploit code or technical details about CVE-2025-5548. It lists tools and environments but lacks functional PoC or analysis.

Classification
Stub 90%
Attack Type
Other
Complexity
Trivial
Reliability
Theoretical
Target: unspecified
No auth needed
devstral-2 · analyzed Mar 17, 2026 Full analysis →
nomisec WRITEUP
by anasrami12 · poc
https://github.com/anasrami12/CVE-2025-5548

This repository provides a detailed technical guide for setting up a vulnerability analysis and exploitation environment on Windows 11, including tool installation and configuration. It does not contain exploit code but offers in-depth documentation for preparing a lab to analyze CVE-2025-5548.

Classification
Writeup 95%
Attack Type
Other
Complexity
Moderate
Reliability
Theoretical
Target: N/A
No auth needed
Prerequisites: Windows 11 VM · Python · Java · Debugging tools (Ghidra, IDA, Immunity Debugger) · Vulnerable applications (Vulnserver, Free Float FTP Server)
devstral-2 · analyzed Mar 17, 2026 Full analysis →
nomisec WORKING POC
by javyan05 · poc
https://github.com/javyan05/CVE-2025-5548

This repository contains a functional exploit for CVE-2025-5548, a stack-based buffer overflow in FreeFloat FTP Server. It includes Python scripts for fuzzing, offset discovery, EIP control, bad character identification, JMP ESP location, and shellcode generation.

Classification
Working Poc 95%
Attack Type
Rce
Complexity
Moderate
Reliability
Reliable
Target: FreeFloat FTP Server
No auth needed
Prerequisites: Windows 7/Windows XP target · FreeFloat FTP Server running · Immunity Debugger and Mona.py for debugging
devstral-2 · analyzed Mar 17, 2026 Full analysis →
nomisec WRITEUP
by Victor875 · poc
https://github.com/Victor875/CVE-2025-5548

The repository provides a detailed technical analysis of CVE-2025-5548, a stack-based buffer overflow vulnerability leading to remote code execution (RCE). It includes setup instructions for exploitation tools and a breakdown of the vulnerability's root cause.

Classification
Writeup 90%
Attack Type
Rce
Complexity
Moderate
Reliability
Theoretical
Target: Unspecified network service (stack-based buffer overflow in command handling)
No auth needed
Prerequisites: Python 3.14 · Ghidra · Immunity Debugger · Mona.py · Vulnserver or similar vulnerable application
devstral-2 · analyzed Mar 16, 2026 Full analysis →
nomisec WRITEUP
by iamEscri · poc
https://github.com/iamEscri/CVE-2025-5548-FreeFloat-FTP-Buffer-Overflow

This repository provides a detailed technical writeup and educational guide on exploiting CVE-2025-5548, a stack-based buffer overflow in FreeFloat FTP Server 1.0. It includes environment setup instructions, exploitation steps, and references to an exploit script, but the actual exploit code is not provided in the shared files.

Classification
Writeup 95%
Attack Type
Rce
Complexity
Moderate
Reliability
Theoretical
Target: FreeFloat FTP Server 1.0
No auth needed
Prerequisites: FreeFloat FTP Server 1.0 running on Windows x86 · Network access to the vulnerable service · Python environment for exploit development
devstral-2 · analyzed Mar 16, 2026 Full analysis →
nomisec WRITEUP
by alfa8sa · poc
https://github.com/alfa8sa/CVE-2025-5548

This repository provides a detailed technical writeup on exploiting CVE-2025-5548, a buffer overflow vulnerability in the NOOP command of an FTP server. It includes step-by-step instructions for binary analysis, fuzzing, EIP control, and shellcode execution, with references to tools like IDA, Immunity Debugger, and Mona.

Classification
Writeup 95%
Attack Type
Rce
Complexity
Moderate
Reliability
Reliable
Target: Free Float FTP Server
Auth required
Prerequisites: Python · IDA · Immunity Debugger · Mona · Free Float FTP Server
devstral-2 · analyzed Mar 15, 2026 Full analysis →
nomisec WRITEUP
by ZoneToolsCiber · poc
https://github.com/ZoneToolsCiber/Explotando-FreeFloatFTP-CVE-2025-5548

This repository provides a detailed technical writeup on stack-based buffer overflow exploitation (CWE-121) in FreeFloat FTP Server (CVE-2025-5548), covering memory corruption concepts, bad characters, and exploit development methodologies. It includes environment setup guides and tooling recommendations but lacks actual exploit code.

Classification
Writeup 95%
Attack Type
Rce
Complexity
Moderate
Reliability
Theoretical
Target: FreeFloat FTP Server
No auth needed
Prerequisites: Windows 11 environment · IDA Free/Ghidra for static analysis · Debugging tools
devstral-2 · analyzed Mar 15, 2026 Full analysis →
nomisec STUB
by celiagomezserra · poc
https://github.com/celiagomezserra/CVE-2025-5548

The repository contains only README files with minimal content and no actual exploit code or technical details. It appears to be a placeholder or incomplete project.

Classification
Stub 90%
Attack Type
Other
Complexity
Trivial
Reliability
Theoretical
Target: unknown
No auth needed
devstral-2 · analyzed Mar 15, 2026 Full analysis →
nomisec WRITEUP
by LorenzoPorrasDuque · poc
https://github.com/LorenzoPorrasDuque/CVE-2025-5548-POC

This repository provides a detailed technical writeup of a stack buffer overflow vulnerability (CVE-2025-5548) in a legacy FTP service, including step-by-step exploitation methodology, bad character analysis, and defensive recommendations. It includes code snippets for payload construction and validation but does not contain a full functional exploit.

Classification
Writeup 95%
Attack Type
Rce
Complexity
Moderate
Reliability
Reliable
Target: Legacy FTP service (version unspecified)
No auth needed
Prerequisites: Legacy FTP service with vulnerable NOOP command handler · Network access to the FTP service · Debugging tools like Immunity Debugger and Mona
devstral-2 · analyzed Mar 14, 2026 Full analysis →
nomisec WRITEUP
by TheMalwareGuardian · poc
https://github.com/TheMalwareGuardian/CVE-2025-5548

This repository provides a detailed technical analysis of CVE-2025-5548, a buffer overflow vulnerability in FreeFloat FTP Server 1.0. It includes root cause analysis, patch diffs, and a technical walkthrough of the vulnerability, demonstrating how multiple FTP commands can trigger the same underlying bug due to unsafe string operations.

Classification
Writeup 95%
Attack Type
Rce
Complexity
Trivial
Reliability
Reliable
Target: FreeFloat FTP Server 1.0
No auth needed
Prerequisites: Network access to the target FTP server · Ability to send crafted FTP commands
devstral-2 · analyzed Mar 10, 2026 Full analysis →

References (4)

Core 4
Core References
Third Party Advisory, VDB Entry vdb-entry
https://vuldb.com/?id.310998
Permissions Required, VDB Entry signature permissions-required
https://vuldb.com/?ctiid.310998
Third Party Advisory, VDB Entry third-party-advisory
https://vuldb.com/?submit.586982

Scores

CVSS v3 7.3
EPSS 0.0184
EPSS Percentile 83.4%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

CISA SSVC

Vulnrichment
Exploitation none
Automatable yes
Technical Impact partial

Details

CWE
CWE-119 CWE-120
Status published
Products (1)
freefloat/freefloat_ftp_server 1.0
Published Jun 04, 2025
Tracked Since Feb 18, 2026