What’s Vulnerable › Vulnerabilities

CVE-2025-30485

• Severity: medium (CVSS 6.2 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2025-04-03 · updated 2026-06-17
• Weakness: CWE-61

Description

UNIX symbolic link (Symlink) following issue exists in FutureNet NXR series, VXR series and WXR series routers. Attaching to the affected product an external storage containing malicious symbolic link files, a logged-in administrative user may obtain and/or destroy internal files.

Affected products

• Century Systems Co., Ltd. FutureNet NXR-1200: all versions
• Century Systems Co., Ltd. FutureNet NXR-120/C: all versions
• Century Systems Co., Ltd. FutureNet NXR-125/CX: all versions
• Century Systems Co., Ltd. FutureNet NXR-1300 series: through firmware version 7.4.12
• Century Systems Co., Ltd. FutureNet NXR-130/C: all versions
• Century Systems Co., Ltd. FutureNet NXR-1420: through firmware version 31.0.1
• Century Systems Co., Ltd. FutureNet NXR-155/C-L: all versions
• Century Systems Co., Ltd. FutureNet NXR-155/C-WM: all versions
• Century Systems Co., Ltd. FutureNet NXR-155/C-XW: all versions
• Century Systems Co., Ltd. FutureNet NXR-160/LW: through firmware version 21.8.4
• Century Systems Co., Ltd. FutureNet NXR-230/C: through firmware version 5.30.13
• Century Systems Co., Ltd. FutureNet NXR-350/C: through firmware version 5.30.9C
• Century Systems Co., Ltd. FutureNet NXR-530: through firmware version 21.11.15
• Century Systems Co., Ltd. FutureNet NXR-610X series: through firmware version 21.14.11D
• Century Systems Co., Ltd. FutureNet NXR-650: through firmware version 21.16.5
• Century Systems Co., Ltd. FutureNet NXR-G050 series: through firmware version 21.12.11
• Century Systems Co., Ltd. FutureNet NXR-G060 series: through firmware version 21.15.6C2
• Century Systems Co., Ltd. FutureNet NXR-G100 series: through firmware version 6.23.11
• Century Systems Co., Ltd. FutureNet NXR-G100/F: all versions
• Century Systems Co., Ltd. FutureNet NXR-G100/N: all versions
• Century Systems Co., Ltd. FutureNet NXR-G100/S: all versions
• Century Systems Co., Ltd. FutureNet NXR-G100/SL: all versions
• Century Systems Co., Ltd. FutureNet NXR-G100/SLW: all versions
• Century Systems Co., Ltd. FutureNet NXR-G110 series: through firmware version 21.15.10
• Century Systems Co., Ltd. FutureNet NXR-G120 series: through firmware version 21.15.2C1
• Century Systems Co., Ltd. FutureNet NXR-G180/L-CA: through firmware version 21.7.33
• Century Systems Co., Ltd. FutureNet NXR-G240 series: through firmware version 9.12.17
• Century Systems Co., Ltd. FutureNet NXR-G260 series: through firmware version 9.12.17
• Century Systems Co., Ltd. FutureNet NXR-G540 series: firmware version 21.17.0
• Century Systems Co., Ltd. FutureNet VXR-x64: through firmware version 21.7.33

References

• https://jvn.jp/en/vu/JVNVU92821536/
• https://www.centurysys.co.jp/backnumber/common/jvnvu92821536.html

Get alerted when CVE-2025-30485 or the next vulnerability affects your stack