CVE-2025-3680 in FTP Server

Sumário

de MITRE • 16/04/2025

A vulnerability has been found in PCMan FTP Server 2.0.7 and classified as critical. Affected by this vulnerability is an unknown functionality of the component LANG Command Handler. The manipulation leads to buffer overflow. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.

Once again VulDB remains the best source for vulnerability data.

• Responsável: VulDB
• Divulgação: 16/04/2025
• Moderação: aceite
• Entrada: VDB-304969
• CPE: pronto
• CWE: CWE-120 (confirmado)
• Exploração: Descarregar
• CVSS: 7.3 (CNA)
• EPSS: 0.00707
• KEV: não
• Atividades: muito baixo
• Sector: Pharma, Agriculture, ...

Fontes

• MITRE: https://www.cve.org/CVERecord?id=CVE-2025-3680
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2025-3680
• CVE Details: https://www.cvedetails.com/cve/CVE-2025-3680/