CVE-2025-25280
- State
- Published
- Severity
- 5.3 Medium
- Published
- Mar 3, 2025
- Updated
- Mar 3, 2025
- Reserved
- Feb 17, 2025
Description
Buffer overflow vulnerability exists in FutureNet AS series (Industrial Routers) and FA series (Protocol Conversion Machine) provided by Century Systems Co., Ltd. If this vulnerability is exploited, a remote unauthenticated attacker may reboot the device by sending a specially crafted request.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 3.1 | 5.3 Medium | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L | jpcert |
Weaknesses
- CWE-120 Buffer overflow
Affected Products
| Product | Versions |
|---|---|
FutureNet AS-250/SCentury Systems Co., Ltd. |
|
FutureNet AS-250/F-SCCentury Systems Co., Ltd. |
|
FutureNet AS-250/F-KOCentury Systems Co., Ltd. |
|
FutureNet AS-250/NLCentury Systems Co., Ltd. |
|
FutureNet AS-250/KLCentury Systems Co., Ltd. |
|
FutureNet AS-250/KL Rev2Century Systems Co., Ltd. |
|
FutureNet AS-250/LCentury Systems Co., Ltd. |
|
FutureNet AS-M250/LCentury Systems Co., Ltd. |
|
FutureNet AS-M250/KLCentury Systems Co., Ltd. |
|
FutureNet AS-M250/NLCentury Systems Co., Ltd. |
|
FutureNet AS-P250/NLCentury Systems Co., Ltd. |
|
FutureNet AS-P250/KLCentury Systems Co., Ltd. |
|
FutureNet AS-210/U4Century Systems Co., Ltd. |
|
FutureNet FA-210Century Systems Co., Ltd. |
|
FutureNet FA-215Century Systems Co., Ltd. |
|
References
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.