CVE-2025-25613
HIGH
MEDIUM
Priority: 0.02
BB Relevance:
75/100
Published: 2025-11-20
Modified: 2026-11-05
First seen: 2026-11-05
Status: active
Attack Surface
Network
Low Complexity
No Auth
No Interaction
Conf. Impact
CVSS Vector Breakdown
AV:
Network
AC:
Low
PR:
None
UI:
None
S:
Unchanged
C:
High
I:
None
A:
None
Description
FS Inc S3150-8T2F 8-Port Gigabit Ethernet L2+ Switch, 8 x Gigabit RJ45, with 2 x 1Gb SFP, Fanless. All versions before 2.2.0D Build 135103 were discovered to transmit cookies for their web based administrative application containing usernames and passwords. These were transmitted in cleartext using simple base64 encoding during every POST request made to the server.
Weakness Classification (1)
Affected Software (1)
| Vendor | Product | Version |
|---|---|---|
| fs | s3150-8t2f_firmware | < 2.2.0D |
References & Advisories (1)
Exploit
Third Party Advisory