← Back

CVE-2025-25613

nvd nist
Published: Nov 20, 2025Modified: Jul 5, 2026

JSON object

Loading...
7.5
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Exploitability: 3.9 / Impact: 3.6
Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0 (Secondary)

Description

FS Inc S3150-8T2F 8-Port Gigabit Ethernet L2+ Switch, 8 x Gigabit RJ45, with 2 x 1Gb SFP, Fanless. All versions before 2.2.0D Build 135103 were discovered to transmit cookies for their web based administrative application containing usernames and passwords. These were transmitted in cleartext using simple base64 encoding during every POST request made to the server.

Affected (1)

Fs
1 product
S3150 8t2f Firmware
Configuration A
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
S3150 8t2f Firmware
Before 2.2.0D
Running on/withPlatform Versions
Fs
S3150 8t2f
All versions

Related CWEs

CWE-312
Cleartext Storage of Sensitive Information
The product stores sensitive information in cleartext within a resource that might be accessible to another control sphere.

References (1)

Source: cve@mitre.org
ExploitThird Party Advisory

Timeline

No history available yet.