Vulnerability in Fs S3150-8t2f
CVE-2025-25613
FS Inc S3150-8T2F 8-Port Gigabit Ethernet L2+ Switch, 8 x Gigabit RJ45, with 2 x 1Gb SFP, Fanless. All versions before 2.2.0D Build 135103 were discovered to transmit cookies for their web based administrative application containing usernames and passwords. These were transmitted in cleartext using simple base64 encoding during every POST request made to the server.
EPSS: 0.002 (13.5th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 7.5 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N.
Affected products
- Fs S3150-8t2f
- Fs S3150-8t2f_firmware
- N/a — versions n/a
Weakness classification (CWE)
References
- cve@mitre.org (Product)
- cve@mitre.org (Broken Link)
- cve@mitre.org (Exploit, Third Party Advisory)
Frequently asked questions
- What is CVE-2025-25613?
- CVE-2025-25613 is a high-severity vulnerability in Fs S3150-8t2f, classified under Cleartext Storage of Sensitive Information. CVSS score: 7.5/10. Published 2025-11-20.
- How severe is CVE-2025-25613?
- High severity. CVSS v3 base score is 7.5 out of 10.