{"id":59617,"date":"2025-07-24T20:04:13","date_gmt":"2025-07-24T20:04:13","guid":{"rendered":""},"modified":"2025-08-09T06:01:29","modified_gmt":"2025-08-09T12:01:29","slug":"cve-2025-54309-critical-vulnerability-in-crushftp-allowing-remote-admin-access","status":"publish","type":"post","link":"https:\/\/www.ameeba.com\/blog\/cve-2025-54309-critical-vulnerability-in-crushftp-allowing-remote-admin-access\/","title":{"rendered":"CVE-2025-54309: Critical Vulnerability in CrushFTP Allowing Remote Admin Access<\/strong>"},"content":{"rendered":"

Overview<\/strong><\/p>\n

In the evolving world of cybersecurity, vulnerabilities are discovered and exploited every day. A recent vulnerability has been identified in CrushFTP versions 10 and 11, before specific patches, which has potentially devastating effects. This vulnerability, known as CVE-2025-54309, is particularly dangerous as it allows remote attackers to gain administrative access<\/a> to the system through HTTPS, providing full control and potential for significant data breaches. This vulnerability has been exploited in the wild, making it an immediate concern for all users of the affected versions of CrushFTP.<\/p>\n

Vulnerability Summary<\/strong><\/p>\n

CVE ID: CVE-2025-54309
\nSeverity: Critical (9.0 on CVSS scale)
\nAttack Vector: Network
\nPrivileges Required: None
\nUser Interaction: None
\nImpact: Potentially complete system<\/a> compromise or data leakage<\/p>\n

Affected Products<\/strong><\/p>\n

Product | Affected Versions<\/p>\n

CrushFTP | 10.0 to 10.8.4
\nCrushFTP | 11.0 to 11.3.4_22<\/p>\n

How the Exploit Works<\/strong><\/p>\n

This vulnerability arises from an oversight in the AS2 validation<\/a> process in CrushFTP. When the DMZ proxy feature is not used, the application mishandles AS2 validation, consequently allowing remote<\/a> attackers to obtain admin access via HTTPS. This exploit does not require any user interaction or any special privileges, making it a severe and easily exploitable vulnerability<\/a>.<\/p>\n

Conceptual Example Code<\/strong><\/p>\n

While the exact exploitation method is not disclosed to prevent misuse, a conceptual example might involve a malicious HTTPS request that takes advantage of the flawed AS2 validation. This request could look similar to this:<\/p>\n

POST \/admin_login HTTP\/1.1\nHost: target.example.com\nContent-Type: application\/x-www-form-urlencoded\nusername=admin&password=not_really_a_password&as2_validation=malicious_payload<\/code><\/pre>\n
In the example above, the `as2_validation` parameter is manipulated with a ‘malicious_payload’ that exploits the AS2 validation vulnerability<\/a>, granting admin access to the attacker.<\/p>\n
Mitigation Guidance<\/strong><\/p>\n
The recommended mitigation for this vulnerability is to apply the vendor-provided patches (CrushFTP 10.8.5 or CrushFTP 11.3.4_23). If it’s not possible to apply these patches immediately, using a Web Application Firewall (WAF) or an Intrusion Detection System (IDS) can provide temporary mitigation. However, these are not full-proof solutions and the patch should be applied as soon as possible to prevent potential system<\/a> compromise or data leakage.<\/p>\n","protected":false},"excerpt":{"rendered":"
Overview In the evolving world of cybersecurity, vulnerabilities are discovered and exploited every day. A recent vulnerability has been identified in CrushFTP versions 10 and 11, before specific patches, which has potentially devastating effects. This vulnerability, known as CVE-2025-54309, is particularly dangerous as it allows remote attackers to gain administrative access to the system through […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"om_disable_all_campaigns":false,"_monsterinsights_skip_tracking":false,"footnotes":""},"categories":[1],"tags":[],"vendor":[],"product":[],"attack_vector":[],"asset_type":[],"severity":[],"exploit_status":[],"class_list":["post-59617","post","type-post","status-publish","format-standard","hentry","category-uncategorized"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t