CVE-2025-25613

7.5 highEPSS 0.3%

High (7.5) in fs s3150-8t2f firmware. EPSS 0.3% chance of exploitation in the next 30 days.

FS Inc S3150-8T2F 8-Port Gigabit Ethernet L2+ Switch, 8 x Gigabit RJ45, with 2 x 1Gb SFP, Fanless. All versions before 2.2.0D Build 135103 were discovered to transmit cookies for their web based administrative application containing usernames and passwords. These were transmitted in cleartext using simple base64 encoding during every POST request made to the server.

Severity

CVSS 3.1

7.5 high

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

EPSS: 0.3% chance of exploitation in the next 30 days; higher than 16% of CVEs (scores of 2026-10-31)
CWE: CWE-312
Published: 2025-11-20
Modified: 2026-07-05
Record from: the NVD, synced 2026-10-19

Affected

fs:s3150-8t2f_firmware

References

https://github.com/SwiftSecur/S3150-8T2F-FS.com-Research/wiki

Check your stack JSON