EUVD-2025-16815Vulnerability Assessment
| Weakness |
CWE
OWASP Top 10:2025
A06:2021 - Vulnerable and Outdated Components
ASVS 5.0
V15 - Secure Coding and Architecture Bounds checking, buffer size validation
MITRE ATT&CK
2 techniques across 2 tactics: Execution, Privilege Escalation The technique list with ATT&CK links and the kill-chain view is part of the Basic plan and up. |
| Impact | While the CVSS:3.1 vector (AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L) rates this as 7.3 (High), multiple factors elevate actual exploitation probability: (1) AV:N and PR:N indicate zero-click, unauthenticated remote attack surface—no special access or conditions required; (2) AC:L means exploitation is straightforward with no special conditions; (3) Public disclosure with confirmed working exploits exists, dramatically increasing EPSS score (likely >0.75); (4) KEV status would likely classify this as actively exploited given public POC availability; (5) The impact scope is important—while individual impact ratings are 'Low' for confidentiality, integrity, and availability, a buffer overflow in network-exposed code typically allows full process compromise, understating actual risk. In SSVC terms: exploitation is active/public, impact is high (RCE on server process), automatable attack delivery is trivial (simple FTP protocol manipulation). Organizations running FreeFloat FTP Server 1.0 face critical risk despite the 7.3 CVSS, as this is a wormable, network-propagable vulnerability affecting a legacy, likely unmaintained product. |
| Exploit ScenarioDerived | An attacker connects to the FTP server on port 21/TCP without credentials. They craft a malicious NOOP command with an abnormally long argument (e.g., 'NOOP ' + 10,000 bytes of crafted payload containing shellcode). The NOOP handler fails to validate the input length and writes the payload into a fixed-size stack buffer. The attacker achieves stack overflow, overwrites the return address, and gains code execution within the FTP server process context (often running as SYSTEM or a privileged account). Given AV:N/AC:L/PR:N characteristics, this requires only basic FTP client knowledge and can be automated trivially; public POC implementations allow reliable exploitation against all FreeFloat FTP Server 1.0 instances on the network. An attacker could use this to establish persistent remote access, pivot to internal systems, or simply crash the service for denial of service. |
Get an e-mail when this CVE is exploited, patched or re-scored. Free account.
Alert meAnalysisAIv1 – Mar 14, 2026
Critical buffer overflow vulnerability in the NOOP Command Handler of FreeFloat FTP Server 1.0 that allows remote, unauthenticated attackers to achieve arbitrary code execution or cause denial of service. The vulnerability has been publicly disclosed with working exploits available, and while the CVSS score of 7.3 indicates moderate severity, the combination of remote exploitability, lack of authentication requirements, and confirmed public disclosure elevates real-world risk significantly.
RemediationAI
Contact FreeFloat vendor to determine if any patched version exists; if no vendor support available, product should be discontinued Workaround: Implement network-level ACLs to limit connections to port 21/TCP to trusted sources only Mitigation: Configure intrusion detection/prevention systems to monitor for FTP NOOP command overflow patterns Long-term: Inventory all systems running FreeFloat FTP Server 1.0 and migrate to supported alternatives
Affected VersionsENISA
Affected Packages
Source: OSV (Open Source Vulnerabilities)
Affects your stack
Affects 1 package in euvd
Checking this CVE against your own stacks and servers is part of the Basic plan and up.
Technical ContextAI · show details
FreeFloat FTP Server 1.0 implements an FTP (File Transfer Protocol) daemon with a NOOP (No Operation) command handler that improperly validates input buffer lengths. The vulnerability is rooted in CWE-119 (Improper Restriction of Operations within the Bounds of a Memory Buffer), a classic stack or heap buffer overflow condition. When processing NOOP commands, the server fails to enforce proper bounds checking on command arguments, allowing an attacker to write beyond allocated memory regions. This affects the FTP control channel protocol (typically TCP port 21) where command parsing occurs. The affected CPE would be cpe:2.3:a:freefloat:freefloat_ftp_server:1.0, with all installation variants vulnerable regardless of configuration.
Know when Freefloat Ftp Server gets its next vulnerability
- Watch products and get an email when something new is published
- Check this CVE against your own stack and servers
- Exploit and PoC references, threat intelligence from 22 sources
No credit card · 7-day full trial
Severity by source
AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
Primary rating from NVD · only source for this CVE.
CVSS VectorNVD
Lifecycle Timeline
2DescriptionCVE.org
A vulnerability, which was classified as critical, was found in FreeFloat FTP Server 1.0. Affected is an unknown function of the component NOOP Command Handler. The manipulation leads to buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
Executive ViewAI
A remote buffer overflow vulnerability in FreeFloat FTP Server 1.0 poses an immediate risk to organizations using this software, as public exploits are available and no patch currently exists. An attacker could exploit this flaw to execute arbitrary code or crash the service, potentially compromising data confidentiality and service availability.
Restrict network access to FTP service using firewall rules (whitelist trusted IPs only); disable NOOP command handling if supported by configuration; deploy intrusion detection/prevention systems (IDS/IPS) with signatures for buffer overflow attempts; implement rate limiting on FTP connections; consider disabling FreeFloat FTP entirely and using alternative secure file transfer protocols (SFTP/FTPS) until patch availability.
Threat Intelligence Overview
NVD
CVE.org
EPSS
Exploit-DB
VulDB
How this decision was reached
The engine reads each signal below and applies a fixed list of rules from top to bottom. The first rule that matches sets the recommended action – like a statement, every line is shown.
What every action level means
SSVC AssessmentENISA
Priority Score
Attack Technique
A buffer overflow occurs when a program writes more data to a memory buffer than it was allocated to hold, causing the excess data to spill into adjacent memory regions.
Denial of Service attacks render applications or systems unavailable by overwhelming resources or triggering failure conditions.
More in Freefloat Ftp Server
View allA stack-based buffer overflow vulnerability exists in FreeFloat FTP Server version 1.0.0. Rated medium severity (CVSS 6.
FreeFloat FTP Server contains multiple critical design flaws that allow unauthenticated remote attackers to upload arbit
Stack-based buffer overflow in FreeFloat FTP Server 1.0 allows remote authenticated users to execute arbitrary code via
A vulnerability was found in FreeFloat FTP Server 1.0 and classified as problematic. Rated high severity (CVSS 7.5), thi
Critical buffer overflow vulnerability in FreeFloat FTP Server 1.0's REIN Command Handler that allows unauthenticated re
Critical buffer overflow vulnerability in the XMKD Command Handler of FreeFloat FTP Server 1.0 that allows unauthenticat
Critical buffer overflow vulnerability in the XCWD Command Handler of FreeFloat FTP Server 1.0 that allows unauthenticat
Critical buffer overflow vulnerability in the RESTART Command Handler of FreeFloat FTP Server 1.0 that allows unauthenti
Critical buffer overflow vulnerability in FreeFloat FTP Server 1.0 affecting the REGET command handler, allowing unauthe
Critical buffer overflow vulnerability in the PROGRESS Command Handler of FreeFloat FTP Server 1.0 that allows unauthent
Critical buffer overflow vulnerability in the SET Command Handler of FreeFloat FTP Server 1.0 that allows unauthenticate
Critical buffer overflow vulnerability in the HOST Command Handler of FreeFloat FTP Server 1.0 that allows unauthenticat
GitHub PoC