CVE-2025-2825

criticalrejectedpriority · track · 10exploit · functionalDEEURU

grimoire priorityP1 · Urgent

Exploitable?

Public exploit

5 exploits · functional

Likely / severe?

— EPSS

CVSS 9.8 · critical

Is it mine?

7 products

Check your exposure

Who says so?

4 sources

cnnvd · enisa_euvd · fstec_bdu · cert_bund

Rejected reason: DO NOT USE THIS CVE RECORD. ConsultIDs: CVE-2025-31161. Reason: This Record is a reservation duplicate of CVE-2025-31161. Notes: All CVE users should reference CVE-2025-31161 instead of this Record. All references and descriptions in this Record have been removed to prevent accidental usage.

cvss

Technical severity, 0–10. One row per scoring source.

9.8

010

base score 0–10 · higher = more severe · hover a vector to decode

v3.19.8criticalAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:Hsecondary · FSTEC (BDU) RU

v3.19.8criticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:Hsecondary · ENISA EU

ssvc

A stakeholder decision — act, attend, or track — from exploitation and impact.

Exploitation: none · Automatable: yes · Technical Impact: totalcoordinatorcisa_ssvcUS

weaknesses

The CWE weakness classes this flaw belongs to.

CWE-287US

exploits (5)

Public proof-of-concept and weaponised exploit code.

auxiliary/gather/crushftp_authbypass_cve_2025_2825CrushFTP AWS4-HMAC Authentication Bypassfunctional · metasploit
Shivshantp/CVE-2025-2825-CrushFTP-AuthBypassAuthentication Bypass PoC for CVE-2025-2825 – Exploiting CrushFTP 10.xPoC · poc_in_github
WOOOOONG/CVE-2025-2825WOOOOONG/CVE-2025-2825PoC · poc_in_github
ghostsec420/ShatteredFTPShattered is a tool and POC for the new CrushedFTP vulns, CVE Exploit Script: CVE-2025-2825 vs CVE-2025-31161PoC · poc_in_github
iteride/CVE-2025-2825iteride/CVE-2025-2825PoC · poc_in_github

affected products (7)

Products and version ranges known to be affected.

CrushFTP CrushFTP <v11.3.1all versionscert_bundDE
CrushFTP CrushFTP v11all versionscert_bundDEcpe:/a:crushftp:crushftp:v11
CrushFTP CrushFTP< v11.3.1cert_bundDE
CrushFTP CrushFTP10.0.0 → 10.8.4enisa_euvdEU
CrushFTP CrushFTP11.0.0 → 11.3.1enisa_euvdEU
Converge Technology Solutions CrushFTP10.0.0 → 10.8.4fstec_bduRU
Converge Technology Solutions CrushFTP11.0.0 → 11.3.1fstec_bduRU

advisories (1)

Vendor and ecosystem advisories describing this.

WID-SEC-W-2025-0615CrushFTP: Schwachstelle ermöglicht das Umgehen der AuthentisierungDeutsch2025-03-20csaf · cert_bundDE
Ein entfernter, anonymer Angreifer kann eine Schwachstelle in CrushFTP ausnutzen, um die Authentisierung zu umgehen.

also known as (4)

Other names and identifiers for this entity.

sources

Which sources assert this record, and when.

cnnvd enisa_euvd fstec_bdu cert_bund NVD CVE.org MITRE

published 2025-03-26modified 2025-04-04

references (7) cnnvd

External citations — patches, advisories, analysis.

scry

Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.

Free scan