What’s Vulnerable › Vulnerabilities
CVE-2025-25613
- Severity: high (CVSS 7.5 v3.1)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 0.3% probability of exploitation in the next 30 days
- Public exploit or detection template: yes
- Published: 2025-11-20 · updated 2026-07-05
- Weakness: CWE-312
Description
FS Inc S3150-8T2F 8-Port Gigabit Ethernet L2+ Switch, 8 x Gigabit RJ45, with 2 x 1Gb SFP, Fanless. All versions before 2.2.0D Build 135103 were discovered to transmit cookies for their web based administrative application containing usernames and passwords. These were transmitted in cleartext using simple base64 encoding during every POST request made to the server.
Affected products
- Fs S3150-8T2F Firmware: before 2.2.0D — fixed in 2.2.0D
How to fix
Upgrade to a fixed version: Fs S3150-8T2F Firmware 2.2.0D. Check the vendor advisory for mitigations.
References
Get alerted when CVE-2025-25613 or the next vulnerability affects your stack