Vulnerability in Fs S3150-8t2f
CVE-2025-25613
FS Inc S3150-8T2F 8-Port Gigabit Ethernet L2+ Switch, 8 x Gigabit RJ45, with 2 x 1Gb SFP, Fanless. All versions before 2.2.0D Build 135103 were discovered to transmit cookies for their web based administrative application containing usernames and passwords. These were transmitted in cleartext using simple base64 encoding during every POST request made to the server.
Published · last modified .
CVSS v3 metric
CVSS v3 base score 7.5 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N.
EPSS exploit prediction
EPSS: 0.002 (12.9th percentile), scored .
Very low probability of exploitation in the next 30 days; routine patching cadence is appropriate. 13th percentile — 12.9% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.002 · newest: 0.002 · change: 0.000
Affected products
Weakness classification (CWE)
References
- fs.com (Product)
- s3150-8t2f.com (Broken Link)
- github.com/SwiftSecur/S3150-8T2F-FS.com-Research/wiki (Exploit, Third Party Advisory)
Frequently asked questions
- What is CVE-2025-25613?
- CVE-2025-25613 is a high-severity vulnerability in Fs S3150-8t2f, classified under Cleartext Storage of Sensitive Information. CVSS score: 7.5/10. Published 2025-11-20.
- How severe is CVE-2025-25613?
- High severity. CVSS v3 base score is 7.5 out of 10.