7.5

CVE-2025-25613

Exploit

EPSS 0.23%
Veröffentlicht 20.11.2025 00:00:00
Zuletzt bearbeitet 05.07.2026 17:17:14
CVE-Watchlists
Login
Unerledigt
Login

FS Inc S3150-8T2F 8-Port Gigabit Ethernet L2+ Switch, 8 x Gigabit RJ45, with 2 x 1Gb SFP, Fanless. All versions before 2.2.0D Build 135103 were discovered to transmit cookies for their web based administrative application containing usernames and passwords. These were transmitted in cleartext using simple base64 encoding during every POST request made to the server.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 1 Referenzen 4

NVD 1 VulnDex Vulnerability Enrichment 1

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Fs ≫ S3150-8t2f Firmware Version < 2.2.0D

Fs ≫ S3150-8t2f Version-

VulnDex Vulnerability Enrichment

Diese Information steht angemeldeten Benutzern zur Verfügung.

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.23%	0.143

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
CISA-ADP	7.5	3.9	3.6	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

CWE-312 Cleartext Storage of Sensitive Information

The product stores sensitive information in cleartext within a resource that might be accessible to another control sphere.

https://github.com/SwiftSecur/S3150-8T2F-FS.com-Research/wiki

Third Party Advisory

Exploit

https://nvd.nist.gov/vuln/detail/CVE-2025-25613

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2025-25613

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2025-25613

EUVD