Wing FTP Server 7.4.3 · Unauthenticated Remote Code Execution (RCE)
Source Exploit-DB RSS Feed
Rated by Threat Radar
Data as of 23 Jul 2025, 01:53 UTC
What to do
AI-suggested
European organizations should immediately conduct an inventory to identify any instances of Wing FTP Server version 7.4.3 in their environment. Until an official patch is released, organizations should implement network-level mitigations such as restricting access to the FTP server to trusted IP addresses and deploying web application firewalls (WAFs) or intrusion prevention systems (IPS) with custom rules to detect and block exploit attempts. Monitoring network traffic for unusual activity related to FTP services is critical. Organizations should also consider temporarily disabling the Wing FTP Server or migrating to alternative secure file transfer solutions if feasible. Regular backups of critical data should be maintained to enable recovery in case of compromise. Once a patch becomes available, prompt application is essential. Additionally, organizations should educate their security teams about the exploit and monitor threat intelligence feeds for updates on active exploitation.
Description
Wing FTP Server 7.4.3 - Unauthenticated Remote Code Execution (RCE)
Indicators of compromise
Exploit source code
# Exploit Title: Wing FTP Server 7.4.3 - Unauthenticated Remote Code Execution (RCE)
# CVE: CVE-2025-47812
# Date: 2025-06-30
# Exploit Author: Sheikh Mohammad Hasan aka 4m3rr0r (https://github.com/4m3rr0r)
# Vendor Homepage: https://www.wftpserver.com/
# Version: Wing FTP Server <= 7.4.3
# Tested on: Linux (Root Privileges), Windows (SYSTEM Privileges)
# Description:
# Wing FTP Server versions prior to 7.4.4 are vulnerable to an unauthenticated remote code execution (RCE)
# flaw (CVE-2025-4781…