Vulnerabilities - CISA Adds CVE-2025-47813 to Catalog

The Flaw

CISA has recently added a new vulnerability, CVE-2025-47813, to its Known Exploited Vulnerabilities (KEV) Catalog. This vulnerability affects the Wing FTP Server and is classified as an Information Disclosure Vulnerability. It has been identified as an active attack vector, meaning that malicious actors are currently exploiting it to gain unauthorized access to sensitive information. This type of vulnerability is particularly concerning as it can lead to significant data breaches if not addressed promptly.

The addition of this vulnerability to the KEV Catalog highlights the urgency of the situation. The Binding Operational Directive (BOD) 22-01 mandates that federal agencies must remediate identified vulnerabilities by a specified deadline. This directive aims to protect federal networks from ongoing threats and reduce the risk posed by known vulnerabilities.

What's at Risk

The exploitation of CVE-2025-47813 poses substantial risks to federal enterprises. Attackers can potentially exploit this vulnerability to access sensitive data, which could lead to severe consequences, including data theft and compromise of critical systems. The federal government has emphasized the importance of addressing such vulnerabilities, as they can serve as gateways for more extensive cyberattacks.

Organizations outside the federal sector should also be aware of the risks associated with this vulnerability. While the BOD 22-01 specifically targets federal agencies, CISA strongly encourages all organizations to prioritize the remediation of vulnerabilities listed in the KEV Catalog. Failing to do so could leave them vulnerable to similar attacks.

Patch Status

As of now, there is no specific patch mentioned for CVE-2025-47813. However, organizations are urged to check for updates from the Wing FTP Server vendor and apply any available patches as soon as possible. Timely remediation is critical to safeguarding systems against exploitation. CISA will continue to monitor the situation and provide updates as they become available.

Immediate Actions

Organizations should take immediate steps to address this vulnerability. Here are some recommended actions:

• Assess your systems to determine if you are using the Wing FTP Server.
• Implement security measures to mitigate the risk of exploitation, such as restricting access to sensitive data.
• Stay informed about updates from CISA and the Wing FTP Server vendor regarding this vulnerability.

By taking these actions, organizations can significantly reduce their exposure to cyberattacks and protect their sensitive information from being compromised.