{"id":59617,"date":"2025-07-24T20:04:13","date_gmt":"2025-07-24T20:04:13","guid":{"rendered":""},"modified":"2025-08-09T06:01:29","modified_gmt":"2025-08-09T12:01:29","slug":"cve-2025-54309-critical-vulnerability-in-crushftp-allowing-remote-admin-access","status":"publish","type":"post","link":"https:\/\/www.ameeba.com\/blog\/cve-2025-54309-critical-vulnerability-in-crushftp-allowing-remote-admin-access\/","title":{"rendered":"<strong>CVE-2025-54309: Critical Vulnerability in CrushFTP Allowing Remote Admin Access<\/strong>"},"content":{"rendered":"<p><strong>Overview<\/strong><\/p>\n<p>In the evolving world of cybersecurity, vulnerabilities are discovered and exploited every day. A recent vulnerability has been identified in CrushFTP versions 10 and 11, before specific patches, which has potentially devastating effects. This vulnerability, known as CVE-2025-54309, is particularly dangerous as it <a href=\"https:\/\/www.ameeba.com\/blog\/cve-2025-41666-watchdog-file-replacement-vulnerability-allowing-remote-access-and-control\/\"  data-wpil-monitor-id=\"66644\">allows remote attackers to gain administrative access<\/a> to the system through HTTPS, providing full control and potential for significant data breaches. This vulnerability has been exploited in the wild, making it an immediate concern for all users of the affected versions of CrushFTP.<\/p>\n<p><strong>Vulnerability Summary<\/strong><\/p>\n<p>CVE ID: CVE-2025-54309<br \/>\nSeverity: Critical (9.0 on CVSS scale)<br \/>\nAttack Vector: Network<br \/>\nPrivileges Required: None<br \/>\nUser Interaction: None<br \/>\nImpact: <a href=\"https:\/\/www.ameeba.com\/blog\/cve-2025-7027-critical-firmware-vulnerability-enabling-arbitrary-memory-writes-leading-to-potential-system-compromise\/\"  data-wpil-monitor-id=\"69758\">Potentially complete system<\/a> compromise or data leakage<\/p>\n<p><strong>Affected Products<\/strong><\/p><div id=\"ameeb-1739508809\" class=\"ameeb-content-2 ameeb-entity-placement\"><div style=\"border-left: 4px solid #555; padding-left: 20px; margin: 48px 0; font-family: Roboto, sans-serif; color: #ffffff; line-height: 1.6; max-width: 720px;\">\r\n  <h2 style=\"margin-top: 0; font-size: 22px; font-weight: 600; display: flex; align-items: center; letter-spacing: -0.02em;\">\r\n    <a href=\"https:\/\/www.ameeba.com\/chat\" style=\"display: inline-flex; align-items: center; margin-right: 10px;\">\r\n      <img decoding=\"async\" src=\"https:\/\/www.ameeba.com\/blog\/wp-content\/uploads\/2025\/10\/Best-App-icon-Ameeba.png\" alt=\"Ameeba Chat Icon\" style=\"width: 42px; height: 42px;\" \/>\r\n    <\/a>\r\n    Share secrets securely\r\n  <\/h2>\r\n\r\n  <p style=\"margin-bottom: 14px; color: #d1d5db;\">\r\n    Ameeba is private infrastructure for communication and sensitive work built on encrypted identity instead of exposed corporate identity systems.\r\n  <\/p>\r\n\r\n  <p style=\"margin-bottom: 18px; color: #a1a1aa;\">\r\n    Passwords, credentials, confidential files, screenshots, internal discussions, sensitive AI context, and private coordination should not become exposed across ordinary communication platforms.\r\n  <\/p>\r\n\r\n  <ul style=\"list-style: none; padding-left: 0; margin-bottom: 24px; color: #e4e4e7;\">\r\n    <li style=\"margin-bottom: 8px;\">\u2022 Encrypted identity<\/li>\r\n    <li style=\"margin-bottom: 8px;\">\u2022 Private Spaces for organizations and teams<\/li>\r\n    <li style=\"margin-bottom: 8px;\">\u2022 End-to-end encrypted chat, calls, files, and notes<\/li>\r\n    <li style=\"margin-bottom: 8px;\">\u2022 Sensitive AI work and protected collaboration<\/li>\r\n    <li>\u2022 Built for information that cannot leak<\/li>\r\n  <\/ul>\r\n\r\n  <p style=\"font-style: italic; font-weight: 600; margin-bottom: 24px; color: #ffffff;\">\r\n    Our mission is to secure human work alongside AI.\r\n  <\/p>\r\n\r\n  <div style=\"display: flex; flex-wrap: wrap; gap: 12px;\">\r\n    <a href=\"https:\/\/www.ameeba.com\/chat\/download\" style=\"background-color: #ffffff; color: #000000; padding: 10px 20px; text-decoration: none; border-radius: 8px; font-weight: 500;\">\r\n      Download Ameeba\r\n    <\/a>\r\n\r\n    <a href=\"https:\/\/www.ameeba.com\/chat\" style=\"border: 1px solid #ffffff; color: #ffffff; padding: 10px 20px; text-decoration: none; border-radius: 8px; font-weight: 500;\">\r\n      Learn More\r\n    <\/a>\r\n  <\/div>\r\n<\/div><\/div>\n<p>Product | Affected Versions<\/p>\n<p>CrushFTP | 10.0 to 10.8.4<br \/>\nCrushFTP | 11.0 to 11.3.4_22<\/p>\n<p><strong>How the Exploit Works<\/strong><\/p>\n<p>This <a href=\"https:\/\/www.ameeba.com\/blog\/cve-2025-40737-critical-file-path-validation-vulnerability-in-sinec-nms\/\"  data-wpil-monitor-id=\"66645\">vulnerability arises from an oversight in the AS2 validation<\/a> process in CrushFTP. When the DMZ proxy feature is not used, the application mishandles AS2 validation, consequently <a href=\"https:\/\/www.ameeba.com\/blog\/cve-2025-7549-critical-vulnerability-in-tenda-fh1201-allows-remote-stack-based-buffer-overflow\/\"  data-wpil-monitor-id=\"67674\">allowing remote<\/a> attackers to obtain admin access via HTTPS. This exploit does not require any user interaction or any special privileges, making it a <a href=\"https:\/\/www.ameeba.com\/blog\/cve-2025-40600-severe-externally-controlled-format-string-vulnerability-in-sonicos-ssl-vpn-interface\/\"  data-wpil-monitor-id=\"69757\">severe and easily exploitable vulnerability<\/a>.<\/p>\n<p><strong>Conceptual Example Code<\/strong><\/p><div id=\"ameeb-3028322078\" class=\"ameeb-content ameeb-entity-placement\"><div class=\"poptin-embedded\" data-id=\"f6b387694f681\"><\/div>\r\n\r\n\r\n\r\n\r\n\r\n<\/div>\n<p>While the exact exploitation method is not disclosed to prevent misuse, a conceptual example might involve a malicious HTTPS request that takes advantage of the flawed AS2 validation. This request could look similar to this:<\/p>\n<pre><code class=\"\" data-line=\"\">POST \/admin_login HTTP\/1.1\nHost: target.example.com\nContent-Type: application\/x-www-form-urlencoded\nusername=admin&amp;password=not_really_a_password&amp;as2_validation=malicious_payload<\/code><\/pre>\n<p>In the example above, the `as2_validation` parameter is <a href=\"https:\/\/www.ameeba.com\/blog\/cve-2025-53964-critical-file-manipulation-vulnerability-in-goldendict\/\"  data-wpil-monitor-id=\"67138\">manipulated with a &#8216;malicious_payload&#8217; that exploits the AS2 validation vulnerability<\/a>, granting admin access to the attacker.<\/p>\n<p><strong>Mitigation Guidance<\/strong><\/p>\n<p>The recommended mitigation for this vulnerability is to apply the vendor-provided patches (CrushFTP 10.8.5 or CrushFTP 11.3.4_23). If it&#8217;s not possible to apply these patches immediately, using a Web Application Firewall (WAF) or an Intrusion Detection System (IDS) can provide temporary mitigation. However, these are not full-proof solutions and the patch should be applied as soon as possible to prevent <a href=\"https:\/\/www.ameeba.com\/blog\/cve-2025-46334-critical-vulnerability-in-git-gui-enables-potential-system-compromise\/\"  data-wpil-monitor-id=\"70735\">potential system<\/a> compromise or data leakage.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Overview In the evolving world of cybersecurity, vulnerabilities are discovered and exploited every day. A recent vulnerability has been identified in CrushFTP versions 10 and 11, before specific patches, which has potentially devastating effects. This vulnerability, known as CVE-2025-54309, is particularly dangerous as it allows remote attackers to gain administrative access to the system through [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"om_disable_all_campaigns":false,"footnotes":""},"categories":[1],"tags":[],"vendor":[],"product":[],"attack_vector":[],"asset_type":[],"severity":[],"exploit_status":[],"class_list":["post-59617","post","type-post","status-publish","format-standard","hentry","category-uncategorized"],"aioseo_notices":[],"_links":{"self":[{"href":"https:\/\/www.ameeba.com\/blog\/wp-json\/wp\/v2\/posts\/59617","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.ameeba.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.ameeba.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.ameeba.com\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.ameeba.com\/blog\/wp-json\/wp\/v2\/comments?post=59617"}],"version-history":[{"count":5,"href":"https:\/\/www.ameeba.com\/blog\/wp-json\/wp\/v2\/posts\/59617\/revisions"}],"predecessor-version":[{"id":63372,"href":"https:\/\/www.ameeba.com\/blog\/wp-json\/wp\/v2\/posts\/59617\/revisions\/63372"}],"wp:attachment":[{"href":"https:\/\/www.ameeba.com\/blog\/wp-json\/wp\/v2\/media?parent=59617"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.ameeba.com\/blog\/wp-json\/wp\/v2\/categories?post=59617"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.ameeba.com\/blog\/wp-json\/wp\/v2\/tags?post=59617"},{"taxonomy":"vendor","embeddable":true,"href":"https:\/\/www.ameeba.com\/blog\/wp-json\/wp\/v2\/vendor?post=59617"},{"taxonomy":"product","embeddable":true,"href":"https:\/\/www.ameeba.com\/blog\/wp-json\/wp\/v2\/product?post=59617"},{"taxonomy":"attack_vector","embeddable":true,"href":"https:\/\/www.ameeba.com\/blog\/wp-json\/wp\/v2\/attack_vector?post=59617"},{"taxonomy":"asset_type","embeddable":true,"href":"https:\/\/www.ameeba.com\/blog\/wp-json\/wp\/v2\/asset_type?post=59617"},{"taxonomy":"severity","embeddable":true,"href":"https:\/\/www.ameeba.com\/blog\/wp-json\/wp\/v2\/severity?post=59617"},{"taxonomy":"exploit_status","embeddable":true,"href":"https:\/\/www.ameeba.com\/blog\/wp-json\/wp\/v2\/exploit_status?post=59617"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}