Skip to main content
ExploitPublished

Wing FTP Server 7.4.3 · Unauthenticated Remote Code Execution (RCE)

Source Exploit-DB RSS Feed

0
Severity
Critical

Rated by Threat Radar

Data as of 23 Jul 2025, 01:53 UTC

What to do

AI-suggested

European organizations should immediately conduct an inventory to identify any instances of Wing FTP Server version 7.4.3 in their environment. Until an official patch is released, organizations should implement network-level mitigations such as restricting access to the FTP server to trusted IP addresses and deploying web application firewalls (WAFs) or intrusion prevention systems (IPS) with custom rules to detect and block exploit attempts. Monitoring network traffic for unusual activity related to FTP services is critical. Organizations should also consider temporarily disabling the Wing FTP Server or migrating to alternative secure file transfer solutions if feasible. Regular backups of critical data should be maintained to enable recovery in case of compromise. Once a patch becomes available, prompt application is essential. Additionally, organizations should educate their security teams about the exploit and monitor threat intelligence feeds for updates on active exploitation.

Description

Wing FTP Server 7.4.3 - Unauthenticated Remote Code Execution (RCE)

Indicators of compromise

Exploit source code

Exploit code for Wing FTP Server 7.4.3 - Unauthenticated Remote Code Execution (RCE)7,183 characters
# Exploit Title: Wing FTP Server 7.4.3 - Unauthenticated Remote Code Execution (RCE)
# CVE: CVE-2025-47812
# Date: 2025-06-30
# Exploit Author: Sheikh Mohammad Hasan aka 4m3rr0r (https://github.com/4m3rr0r)
# Vendor Homepage: https://www.wftpserver.com/
# Version: Wing FTP Server <= 7.4.3
# Tested on: Linux (Root Privileges), Windows (SYSTEM Privileges)

# Description:
# Wing FTP Server versions prior to 7.4.4 are vulnerable to an unauthenticated remote code execution (RCE)
# flaw (CVE-2025-4781…

References

Community reviews

Loading reviews…