CVE-2012-2532: Microsoft FTP Service

Medium severity, CVSS 5.0. EPSS: 42% chance of exploitation in the next 30 days.

Microsoft FTP Service 7.0 and 7.5 for Internet Information Services (IIS) processes unspecified commands before TLS is enabled for a session, which allows remote attackers to obtain sensitive information by reading the replies to these commands, aka "FTP Command Injection Vulnerability."

Affected products

• Microsoft FTP Service: version 7.0 only; version 7.5 only

Published 2012-11-14. Last modified 2026-06-16.