Vulnerability in Century Systems Co., Ltd. Futurenet Nxr-1200
CVE-2025-30485
UNIX symbolic link (Symlink) following issue exists in FutureNet NXR series, VXR series and WXR series routers. Attaching to the affected product an external storage containing malicious symbolic link files, a logged-in administrative user may obtain and/or destroy internal files.
EPSS: 0.003 (22.8th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 6.2 (Medium). Vector: CVSS:3.0/AV:P/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H.
Affected products
- Century Systems Co., Ltd. Futurenet Nxr-1200 — versions N/A
- Century Systems Co., Ltd. Futurenet Nxr-120/c — versions N/A
- Century Systems Co., Ltd. Futurenet Nxr-125/cx — versions N/A
- Century Systems Co., Ltd. Futurenet Nxr-1300 Series — versions firmware version 7.4.12 and earlier
- Century Systems Co., Ltd. Futurenet Nxr-130/c — versions N/A
- Century Systems Co., Ltd. Futurenet Nxr-1420 — versions firmware version 31.0.1 and earlier
- Century Systems Co., Ltd. Futurenet Nxr-155/c-l — versions N/A
- Century Systems Co., Ltd. Futurenet Nxr-155/c-wm — versions N/A
- Century Systems Co., Ltd. Futurenet Nxr-155/c-xw — versions N/A
- Century Systems Co., Ltd. Futurenet Nxr-160/lw — versions firmware version 21.8.4 and earlier
Weakness classification (CWE)
References
Frequently asked questions
- What is CVE-2025-30485?
- CVE-2025-30485 is a medium-severity vulnerability in Century Systems Co., Ltd. Futurenet Nxr-1200, classified under UNIX Symbolic Link (Symlink) Following. CVSS score: 6.2/10. Published 2025-04-03.
- How severe is CVE-2025-30485?
- Medium severity. CVSS v3 base score is 6.2 out of 10.