CVE-2025-34110
Published: 15 July 2025
Summary
CVE-2025-34110 is a critical-severity Path Traversal (CWE-22) vulnerability. Its CVSS base score is 9.3 (Critical).
Operationally, ranked in the top 2.1% of CVEs by exploit likelihood; it is not currently listed in the CISA KEV catalog; a public proof-of-concept is referenced.
Deeper analysis
A directory traversal vulnerability affects ColoradoFTP Server version 1.3 Build 8 and earlier on Windows. The flaw stems from insufficient sanitization of user-supplied paths in the FTP GET and PUT command handlers, enabling unauthenticated remote attackers to read or write files outside the configured root directory. The issue is specific to the Windows build and is tracked under CWE-22, CWE-306, and CWE-552, with a CVSS 4.0 score of 9.3.
Unauthenticated attackers can exploit the vulnerability over the network by supplying traversal sequences such as "../" during FTP operations. Successful exploitation grants the ability to access or modify arbitrary system files, potentially leading to information disclosure or further compromise of the host.
Public references include a commit in the ColoradoFTP repository addressing the path handling, a Metasploit auxiliary scanner module, an Exploit-DB entry, and a VulnCheck advisory that document the flaw and available tooling. Administrators should apply the referenced fix or upgrade to a patched build and restrict FTP access to trusted networks.
The EPSS score stands at 0.5060 with no indicated rise from a lower baseline. Public exploit code has been available for years, indicating sustained interest among attackers and defenders.
EU & UK References
- 🇪🇺 ENISA EUVD: EUVD-2025-21436
Vulnerability details
A directory traversal vulnerability exists in ColoradoFTP Server ≤ 1.3 Build 8 for Windows, allowing unauthenticated attackers to read or write arbitrary files outside the configured FTP root directory. The flaw is due to insufficient sanitation of user-supplied file paths…
more
in the FTP GET and PUT command handlers. Exploitation is possible by submitting traversal sequences during FTP operations, enabling access to system-sensitive files. This issue affects only the Windows version of ColoradoFTP.
- CWE(s)
Related Threats
No named actor attribution yet. ATT&CK technique mapping in progress for this CVE.
Affected Assets
Mitigating Controls
Likely Mitigating Controls AI
Per-CVE control mapping for this CVE has not run yet; the list below is derived from the weakness types (CWEs) cited in the NVD entry.
Requires verification of individual access authorizations before granting facility entry, addressing missing authentication for critical physical access.
Knowing every system allows confirmation that critical functions are not left without required authentication mechanisms.
Requires authentication gates on critical functions that must remain unavailable to anonymous public users.
Decoy implementations of critical functions without authentication lure and record attackers probing for missing auth checks.
Requires established identification and authentication to unlock, mitigating missing authentication for continued system access.
Requiring identification and rationale for actions allowed without authentication ensures critical functions are not left unprotected by forcing review of authentication requirements.
Authorizing mobile device connections to organizational systems ensures authentication is performed for this critical access function.
Controls on authorized publication limit files and directories with nonpublic data from becoming accessible to external parties.