vulntracker.iovulntracker.io
© 2026 vulntracker.io

CVE-2012-10028

Netwin SurgeFTP <= v23c8 Authenticated RCE

HIGH
8.6
CVSS Score
Published: August 5, 2025 at 08:04 PM UTC
Updated: June 16, 2026 at 11:38 PM UTC
1 product affected across 1 vendorSurgeftp

Using SurgeFTP by Netwin?

Get instant alerts when new vulnerabilities affect SurgeFTP - before attackers find them.

Real-time alertsTrack your software stackFree plan available
Start FreeSign In
Severity
HIGH8.6
Exploit prediction
EPSS 2%
SSVC
PoC

Description

Netwin SurgeFTP version 23c8 and prior contains a vulnerability in its web-based administrative console that allows authenticated users to execute arbitrary system commands via crafted POST requests to `surgeftpmgr.cgi`. This can lead to full remote code execution on the underlying system.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Surgeftp· Netwin
95%
v ≤ 23c8

Remediation

No guide yet

No remediation guidance has been written for this CVE yet, and no fixed version or vendor advisory is recorded against it.

References (5)

Product
Source: [email protected]
https://netwinsite.com/surgeftp/
Exploit
Source: [email protected]
https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/multi/http/netwin_surgeftp_exec.rb
Exploit
Source: [email protected]
https://www.exploit-db.com/exploits/23522
Exploit
Source: [email protected]
https://www.exploit-db.com/exploits/23601
Third Party Advisory
Source: [email protected]
https://www.vulncheck.com/advisories/netwin-surgeftp-auth-rce

SSVC — Action Prioritization

SSVCPoCAutomatableTotal impact

SSVC signals action urgency (what to patch first), separate from CVSS which measures severity.

CVSS

8.6HIGHVulnCheck
Vector?

Quick Info

StatusDEFERRED
CWE
CWE-78

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Create accountSign in
Free plan, no card