PT-2025-46684 · Fujitsu · Fujitsu Irmc S6

Published 2025-11-12 · Updated 2025-11-14 · CVE-2025-65002

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Fujitsu iRMC S6 on M5 versions prior to 1.37S

Description The software mishandles Redfish/WebUI access when a username with a length of exactly 16 characters is used. The issue affects access through the Redfish API and the WebUI. The vulnerable component is related to the handling of username length during authentication.

Recommendations Update to version 1.37S or later.

Fix

Incorrect Authorization

Weakness Enumeration

CWE-863

Related Identifiers

CVE-2025-65002

Affected Products

Fujitsu Irmc S6

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2025-65002 · Security Note
• https://twitter.com/CVEnew/status/1988820475091529990 · Twitter Post
• https://t.me/cveNotify/142782 · Telegram Post
• https://t.me/CVEtracker/37164 · Telegram Post
• https://security.ts.fujitsu.com/ProductSecurity/content/FsasTech-PSIRT-FTI-ISS-2025-082610-Security-Notice.pdf · Note