U.S. CISA Adds Wing FTP Server Flaw to Its Known Exploited Vulnerabilities Catalog

U.S. CISA adds Wing FTP Server flaw to its Known Exploited Vulnerabilities catalog

美国网络安全和基础设施安全局（CISA）将Wing FTP Server的一个关键漏洞（CVE-2025-47812）加入已知被利用的漏洞目录。该漏洞由MITRE发布，源于空字节处理不当，允许攻击者注入恶意Lua代码并远程执行命令。此漏洞可被匿名或认证用户利用，默认以root或SYSTEM权限运行。CISA要求联邦机构于2025年8月4日前修复受影响版本（7.4.4以下）。

Exploited Wing file transfer bug risks ‘total server compromise,’ CISA warns

A critical vulnerability in products from the file transfer company Wing FTP Server is being actively exploited, the Cybersecurity and Infrastructure Security Agency said.