CVE-2012-10030

FreeFloat FTP Server contains multiple critical design flaws that allow unauthenticated remote attackers to upload arbitrary files to sensitive system directories. The server accepts empty credentials, defaults user access to the root of the C:\ drive, and imposes no restrictions on file type or destination path. These conditions enable attackers to upload executable payloads and .mof files to locations such as system32 and wbem\mof, where Windows Management Instrumentation (WMI) automatically processes and executes them. This results in remote code execution with SYSTEM-level privileges, without requiring user interaction.

• CWE-306
• CWE-434
• CWE-732

• https://archive.org/details/tucows_367516_Freefloat_FTP_ServerProduct
• https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/windows/ftp/freefloatftp_wbem.rbExploit
• https://www.exploit-db.com/exploits/23226Exploit
• https://www.fortiguard.com/encyclopedia/ips/34209/freefloat-ftp-server-arbitrary-file-uploadThird Party Advisory
• https://www.vulncheck.com/advisories/freefloat-ftp-server-arbitrary-file-uploadThird Party Advisory
• https://www.exploit-db.com/exploits/23226Exploit

Published

Aug 5, 2025

Last Modified

Jun 16, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2012-10025The WordPress plugin Advanced Custom Fields (ACF) version 3.…10
• CVE-2012-10026The WordPress plugin Asset-Manager version 2.0 and below con…10
• CVE-2012-10027WP-Property plugin for WordPress up to and including version…9.3
• CVE-2012-10028Netwin SurgeFTP version 23c8 and prior contains a vulnerabil…8.6
• CVE-2012-10029Nagios XI Network Monitor prior to Graph Explorer component …8.6
• CVE-2012-1003Multiple integer overflows in Opera 11.60 and earlier allow …
• CVE-2012-10031BlazeVideo HDTV Player Pro v6.6.0.3 is vulnerable to a stack…8.6
• CVE-2012-10032Maxthon3 version 3.2.2 build 1000 and prior are vulnerable t…8.7
• CVE-2012-10033Narcissus is vulnerable to remote code execution via imprope…9.3
• CVE-2012-10034ClanSphere 2011.3 is vulnerable to a local file inclusion (L…7.5
• CVE-2012-10035Turbo FTP Server versions 1.30.823 and 1.30.826 contain a bu…10
• CVE-2012-10036Project Pier 0.8.8 and earlier contains an unauthenticated a…9.3