PT-2025-47631 · Fs · Fs Inc S3150-8T2F

CVE-2025-25613 · Publicado 2025-11-20 · Atualizado 2025-11-21

Positive Technologies (AI Summary)

CVSS v3.1

7.5

Alta

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions FS Inc S3150-8T2F 8-Port Gigabit Ethernet L2+ Switch versions prior to 2.2.0D Build 135103

Description The FS Inc S3150-8T2F 8-Port Gigabit Ethernet L2+ Switch transmits cookies containing usernames and passwords in cleartext using base64 encoding during every POST request made to the server for its web-based administrative application. The cookies are sent with each POST request to the server.

Recommendations Update to version 2.2.0D Build 135103 or later.

Exploit

Correção

Cleartext Storage of Sensitive Information

Enumeração de Fraquezas

CWE-312

CWE-539

Identificadores relacionados

CVE-2025-25613

Produtos afetados

Fs Inc S3150-8T2F

Referências · 7

• 🔥 https://github.com/SwiftSecur/S3150-8T2F-FS.com-Research/wiki · Exploit
• https://osv.dev/vulnerability/CVE-2025-25613 · Aviso do Fabricante
• https://twitter.com/CVEnew/status/1991616447458476523 · Publicação no Twitter
• https://t.me/CVEtracker/37867 · Publicação no Telegram
• http://s3150-8t2f.com · Nota
• http://fs.com · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2025-25613 · Nota de Segurança