What’s Vulnerable › Vulnerabilities

CVE-2025-54763

• Severity: high (CVSS 7.2 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2025-10-31 · updated 2026-10-18
• Weakness: CWE-78

Description

FutureNet MA and IP-K series provided by Century Systems Co., Ltd. contain an OS command Injection vulnerability. A user who logs in to the Web UI of the product may execute an arbitrary OS command.

Affected products

• Century Systems Co., Ltd. FutureNet IP-K series: from from 2.0.0 through 2.2.1
• Century Systems Co., Ltd. FutureNet MA-E300 series: from from 5.0.0 through 6.2.1
• Century Systems Co., Ltd. FutureNet MA-P series: from from 5.0.0 through 6.4.0
• Century Systems Co., Ltd. FutureNet MA-S series: from from 5.0.0 through 6.4.0
• Century Systems Co., Ltd. FutureNet MA-X series: from from 6.0.0 through 6.4.1

References

• https://jvn.jp/en/vu/JVNVU98191201/
• https://www.centurysys.co.jp/backnumber/common/jvnvu98191201.html

Get alerted when CVE-2025-54763 or the next vulnerability affects your stack