Ameeba Security Research

Defensive CVE and exploit intelligence

Ameeba Blog Search
TRENDING · 1 WEEK
Attack Vector
Vendor
Severity

CVE-2025-54309: Critical Vulnerability in CrushFTP Allowing Remote Admin Access

Views: 500

Overview

In the evolving world of cybersecurity, vulnerabilities are discovered and exploited every day. A recent vulnerability has been identified in CrushFTP versions 10 and 11, before specific patches, which has potentially devastating effects. This vulnerability, known as CVE-2025-54309, is particularly dangerous as it allows remote attackers to gain administrative access to the system through HTTPS, providing full control and potential for significant data breaches. This vulnerability has been exploited in the wild, making it an immediate concern for all users of the affected versions of CrushFTP.

Vulnerability Summary

CVE ID: CVE-2025-54309
Severity: Critical (9.0 on CVSS scale)
Attack Vector: Network
Privileges Required: None
User Interaction: None
Impact: Potentially complete system compromise or data leakage

Affected Products

Ameeba Chat Icon Share secrets securely

Ameeba is private infrastructure for communication and sensitive work built on encrypted identity instead of exposed corporate identity systems.

Passwords, credentials, confidential files, screenshots, internal discussions, sensitive AI context, and private coordination should not become exposed across ordinary communication platforms.

  • • Encrypted identity
  • • Private Spaces for organizations and teams
  • • End-to-end encrypted chat, calls, files, and notes
  • • Sensitive AI work and protected collaboration
  • • Built for information that cannot leak

Our mission is to secure human work alongside AI.

Product | Affected Versions

CrushFTP | 10.0 to 10.8.4
CrushFTP | 11.0 to 11.3.4_22

How the Exploit Works

This vulnerability arises from an oversight in the AS2 validation process in CrushFTP. When the DMZ proxy feature is not used, the application mishandles AS2 validation, consequently allowing remote attackers to obtain admin access via HTTPS. This exploit does not require any user interaction or any special privileges, making it a severe and easily exploitable vulnerability.

Conceptual Example Code

While the exact exploitation method is not disclosed to prevent misuse, a conceptual example might involve a malicious HTTPS request that takes advantage of the flawed AS2 validation. This request could look similar to this:

POST /admin_login HTTP/1.1
Host: target.example.com
Content-Type: application/x-www-form-urlencoded
username=admin&password=not_really_a_password&as2_validation=malicious_payload

In the example above, the `as2_validation` parameter is manipulated with a ‘malicious_payload’ that exploits the AS2 validation vulnerability, granting admin access to the attacker.

Mitigation Guidance

The recommended mitigation for this vulnerability is to apply the vendor-provided patches (CrushFTP 10.8.5 or CrushFTP 11.3.4_23). If it’s not possible to apply these patches immediately, using a Web Application Firewall (WAF) or an Intrusion Detection System (IDS) can provide temporary mitigation. However, these are not full-proof solutions and the patch should be applied as soon as possible to prevent potential system compromise or data leakage.

Want to discuss this further? Join the Ameeba Cybersecurity Group Chat.

Disclaimer:

The information and code presented in this article are provided for educational and defensive cybersecurity purposes only. Any conceptual or pseudocode examples are simplified representations intended to raise awareness and promote secure development and system configuration practices.

Do not use this information to attempt unauthorized access or exploit vulnerabilities on systems that you do not own or have explicit permission to test.

Ameeba and its authors do not endorse or condone malicious behavior and are not responsible for misuse of the content. Always follow ethical hacking guidelines, responsible disclosure practices, and local laws.

More posts

Ameeba Chat