Read the docs
TI-2025-24267 Aliases CVE-2025-34107GHSA-78rx-wv2g-87wh

WinaXe 7.7 FTP Client Remote Buffer Overflow

Priority MEDIUM 48CWE-121Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
Passive
Attack complexity
Low
Attack requirements
None
Impact type
Code execution
Confidentiality · integrity · availability
High · High · High
Fix status
No fix listed

Attack profile from CVSS 4.0 · CNA. Fix status from CNA. Impact type from CWE-121 and the CVSS impact.

Summary

A buffer overflow vulnerability exists in the WinaXe FTP Client version 7.7 within the FTP banner parsing functionality, WCMDPA10.dll. When the client connects to a remote FTP server and receives an overly long '220 Server Ready' response, the vulnerable component responsible for parsing the banner overflows a stack buffer, leading to arbitrary code execution under the context of the user.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.01309 70th percentileScored 2026-11-07
Public exploit Yes 3 exploit referencesTagged by the CNA
Fix No fix listed No fixed version in the sources yet

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
Yes
Technical impact
Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
LabfWinaXe FTP Client7.7—No fix listedCNA
  • WinaXe FTP Client VendorLabf Affected 7.7 Fixed in — No fix listed CNA

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2025-34107
  2. 2026-10-03 Alias added: GHSA-78rx-wv2g-87wh

References

Exploit 3

  • TI-2019-15786 LabF nfsAxe 3.7 Ping Client Buffer Overflow CVSS 4.0HIGH 8.6
  • TI-2019-15660 Axessh 4.2 Local Stack-based Buffer Overflow via Log File Name CVSS 4.0HIGH 8.6
  • TI-2019-15643 Axessh 4.2 Denial of Service via Log File Name CVSS 4.0MEDIUM 6.9
  • TI-2017-13255 Buffer Overflow in the FTP client in LabF nfsAxe 3.7 allows remote FTP servers to execute… CVSS 3.0CRITICAL 9.8
  • TI-2019-14255 The FTP client in AceaXe Plus 1.0 allows a buffer overflow via a long EHLO response from an FTP server. CVSS 3.1CRITICAL 9.8
  • TI-2017-10805 Buffer overflow in LabF nfsAxe FTP client 3.7 allows an attacker to execute code remotely. CVSS 3.1CRITICAL 9.8

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences