{"id":59617,"date":"2025-07-24T20:04:13","date_gmt":"2025-07-24T20:04:13","guid":{"rendered":""},"modified":"2025-08-09T06:01:29","modified_gmt":"2025-08-09T12:01:29","slug":"cve-2025-54309-critical-vulnerability-in-crushftp-allowing-remote-admin-access","status":"publish","type":"post","link":"https:\/\/www.ameeba.com\/blog\/cve-2025-54309-critical-vulnerability-in-crushftp-allowing-remote-admin-access\/","title":{"rendered":"<strong>CVE-2025-54309: Critical Vulnerability in CrushFTP Allowing Remote Admin Access<\/strong>"},"content":{"rendered":"<p><strong>Overview<\/strong><\/p>\n<p>In the evolving world of cybersecurity, vulnerabilities are discovered and exploited every day. A recent vulnerability has been identified in CrushFTP versions 10 and 11, before specific patches, which has potentially devastating effects. This vulnerability, known as CVE-2025-54309, is particularly dangerous as it <a href=\"https:\/\/www.ameeba.com\/blog\/cve-2025-41666-watchdog-file-replacement-vulnerability-allowing-remote-access-and-control\/\"  data-wpil-monitor-id=\"66644\">allows remote attackers to gain administrative access<\/a> to the system through HTTPS, providing full control and potential for significant data breaches. This vulnerability has been exploited in the wild, making it an immediate concern for all users of the affected versions of CrushFTP.<\/p>\n<p><strong>Vulnerability Summary<\/strong><\/p>\n<p>CVE ID: CVE-2025-54309<br \/>\nSeverity: Critical (9.0 on CVSS scale)<br \/>\nAttack Vector: Network<br \/>\nPrivileges Required: None<br \/>\nUser Interaction: None<br \/>\nImpact: <a href=\"https:\/\/www.ameeba.com\/blog\/cve-2025-7027-critical-firmware-vulnerability-enabling-arbitrary-memory-writes-leading-to-potential-system-compromise\/\"  data-wpil-monitor-id=\"69758\">Potentially complete system<\/a> compromise or data leakage<\/p>\n<p><strong>Affected Products<\/strong><\/p><div id=\"ameeb-2812603180\" class=\"ameeb-content-2 ameeb-entity-placement\"><div style=\"border-left: 4px solid #555; padding-left: 20px; margin: 48px 0; font-family: Roboto, sans-serif; color: #ffffff; line-height: 1.6; max-width: 700px;\">\r\n  <h2 style=\"margin-top: 0; font-size: 20px; font-weight: 600; display: flex; align-items: center;\">\r\n    <a href=\"https:\/\/www.ameeba.com\/chat\" style=\"display: inline-flex; align-items: center; margin-right: 8px;\">\r\n      <img decoding=\"async\" src=\"https:\/\/www.ameeba.com\/blog\/wp-content\/uploads\/2025\/10\/Best-App-icon-Ameeba.png\" alt=\"Ameeba Chat Icon\" style=\"width: 40px; height: 40px;\" \/>\r\n    <\/a>\r\n    A new way to communicate\r\n  <\/h2>\r\n\r\n  <p style=\"margin-bottom: 12px;\">\r\n    Ameeba Chat is built on encrypted identity, not personal profiles.\r\n  <\/p>\r\n\r\n  <p style=\"margin-bottom: 16px;\">\r\n    Message, call, share files, and coordinate with identities kept separate.\r\n  <\/p>\r\n\r\n  <ul style=\"list-style: none; padding-left: 0; margin-bottom: 20px;\">\r\n    <li>\u2022 Encrypted identity<\/li>\r\n    <li>\u2022 Ameeba Chat authenticates access<\/li>\r\n    <li>\u2022 Aliases and categories<\/li>\r\n    <li>\u2022 End-to-end encrypted chat, calls, and files<\/li>\r\n    <li>\u2022 Secure notes for sensitive information<\/li>\r\n  <\/ul>\r\n\r\n  <p style=\"font-style: italic; font-weight: 600; margin-bottom: 24px;\">\r\n    Private communication, rethought.\r\n  <\/p>\r\n\r\n  <div style=\"display: flex; flex-wrap: wrap; gap: 12px;\">\r\n    <a href=\"https:\/\/www.ameeba.com\/chat\/download\" style=\"background-color: #ffffff; color: #000000; padding: 10px 20px; text-decoration: none; border-radius: 6px; font-weight: 500;\">Download Ameeba Chat<\/a>\r\n    <a href=\"https:\/\/www.ameeba.com\/chat\" style=\"border: 1px solid #ffffff; color: #ffffff; padding: 10px 20px; text-decoration: none; border-radius: 6px; font-weight: 500;\">Learn More<\/a>\r\n  <\/div>\r\n<\/div>\r\n<\/div>\n<p>Product | Affected Versions<\/p>\n<p>CrushFTP | 10.0 to 10.8.4<br \/>\nCrushFTP | 11.0 to 11.3.4_22<\/p>\n<p><strong>How the Exploit Works<\/strong><\/p>\n<p>This <a href=\"https:\/\/www.ameeba.com\/blog\/cve-2025-40737-critical-file-path-validation-vulnerability-in-sinec-nms\/\"  data-wpil-monitor-id=\"66645\">vulnerability arises from an oversight in the AS2 validation<\/a> process in CrushFTP. When the DMZ proxy feature is not used, the application mishandles AS2 validation, consequently <a href=\"https:\/\/www.ameeba.com\/blog\/cve-2025-7549-critical-vulnerability-in-tenda-fh1201-allows-remote-stack-based-buffer-overflow\/\"  data-wpil-monitor-id=\"67674\">allowing remote<\/a> attackers to obtain admin access via HTTPS. This exploit does not require any user interaction or any special privileges, making it a <a href=\"https:\/\/www.ameeba.com\/blog\/cve-2025-40600-severe-externally-controlled-format-string-vulnerability-in-sonicos-ssl-vpn-interface\/\"  data-wpil-monitor-id=\"69757\">severe and easily exploitable vulnerability<\/a>.<\/p>\n<p><strong>Conceptual Example Code<\/strong><\/p><div id=\"ameeb-3513523392\" class=\"ameeb-content ameeb-entity-placement\"><div class=\"poptin-embedded\" data-id=\"f6b387694f681\"><\/div>\r\n\r\n\r\n\r\n\r\n\r\n<\/div>\n<p>While the exact exploitation method is not disclosed to prevent misuse, a conceptual example might involve a malicious HTTPS request that takes advantage of the flawed AS2 validation. This request could look similar to this:<\/p>\n<pre><code class=\"\" data-line=\"\">POST \/admin_login HTTP\/1.1\nHost: target.example.com\nContent-Type: application\/x-www-form-urlencoded\nusername=admin&amp;password=not_really_a_password&amp;as2_validation=malicious_payload<\/code><\/pre>\n<p>In the example above, the `as2_validation` parameter is <a href=\"https:\/\/www.ameeba.com\/blog\/cve-2025-53964-critical-file-manipulation-vulnerability-in-goldendict\/\"  data-wpil-monitor-id=\"67138\">manipulated with a &#8216;malicious_payload&#8217; that exploits the AS2 validation vulnerability<\/a>, granting admin access to the attacker.<\/p>\n<p><strong>Mitigation Guidance<\/strong><\/p>\n<p>The recommended mitigation for this vulnerability is to apply the vendor-provided patches (CrushFTP 10.8.5 or CrushFTP 11.3.4_23). If it&#8217;s not possible to apply these patches immediately, using a Web Application Firewall (WAF) or an Intrusion Detection System (IDS) can provide temporary mitigation. However, these are not full-proof solutions and the patch should be applied as soon as possible to prevent <a href=\"https:\/\/www.ameeba.com\/blog\/cve-2025-46334-critical-vulnerability-in-git-gui-enables-potential-system-compromise\/\"  data-wpil-monitor-id=\"70735\">potential system<\/a> compromise or data leakage.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Overview In the evolving world of cybersecurity, vulnerabilities are discovered and exploited every day. A recent vulnerability has been identified in CrushFTP versions 10 and 11, before specific patches, which has potentially devastating effects. This vulnerability, known as CVE-2025-54309, is particularly dangerous as it allows remote attackers to gain administrative access to the system through [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"om_disable_all_campaigns":false,"footnotes":""},"categories":[1],"tags":[],"vendor":[],"product":[],"attack_vector":[],"asset_type":[],"severity":[],"exploit_status":[],"class_list":["post-59617","post","type-post","status-publish","format-standard","hentry","category-uncategorized"],"aioseo_notices":[],"_links":{"self":[{"href":"https:\/\/www.ameeba.com\/blog\/wp-json\/wp\/v2\/posts\/59617","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.ameeba.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.ameeba.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.ameeba.com\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.ameeba.com\/blog\/wp-json\/wp\/v2\/comments?post=59617"}],"version-history":[{"count":5,"href":"https:\/\/www.ameeba.com\/blog\/wp-json\/wp\/v2\/posts\/59617\/revisions"}],"predecessor-version":[{"id":63372,"href":"https:\/\/www.ameeba.com\/blog\/wp-json\/wp\/v2\/posts\/59617\/revisions\/63372"}],"wp:attachment":[{"href":"https:\/\/www.ameeba.com\/blog\/wp-json\/wp\/v2\/media?parent=59617"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.ameeba.com\/blog\/wp-json\/wp\/v2\/categories?post=59617"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.ameeba.com\/blog\/wp-json\/wp\/v2\/tags?post=59617"},{"taxonomy":"vendor","embeddable":true,"href":"https:\/\/www.ameeba.com\/blog\/wp-json\/wp\/v2\/vendor?post=59617"},{"taxonomy":"product","embeddable":true,"href":"https:\/\/www.ameeba.com\/blog\/wp-json\/wp\/v2\/product?post=59617"},{"taxonomy":"attack_vector","embeddable":true,"href":"https:\/\/www.ameeba.com\/blog\/wp-json\/wp\/v2\/attack_vector?post=59617"},{"taxonomy":"asset_type","embeddable":true,"href":"https:\/\/www.ameeba.com\/blog\/wp-json\/wp\/v2\/asset_type?post=59617"},{"taxonomy":"severity","embeddable":true,"href":"https:\/\/www.ameeba.com\/blog\/wp-json\/wp\/v2\/severity?post=59617"},{"taxonomy":"exploit_status","embeddable":true,"href":"https:\/\/www.ameeba.com\/blog\/wp-json\/wp\/v2\/exploit_status?post=59617"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}