← Vulnerability feed

Vulnerability record · CVE-2025-25613 · published 20 November 2025

CVE-2025-25613: Fs s3150-8t2f firmware cleartext storage of sensitive data vulnerability

FFs · S3150 8t2f Firmware

FS Inc S3150-8T2F 8-Port Gigabit Ethernet L2+ Switch, 8 x Gigabit RJ45, with 2 x 1Gb SFP, Fanless. All versions before 2.2.0D Build 135103 were discovered to transmit cookies for their web based administrative application containing usernames and passwords. These were transmitted in cleartext using simple base64 encoding during every POST request made to the server.

7.5 CVSS 3.1 High EPSS 0.23% · top 87.1% CWE-312 · Cleartext storage of sensitive data
7.5CVSS 3.1 base score
0.23%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
1References, 1 tagged exploit
5 Jul 2026Last modified by NVD

Description

FS Inc S3150-8T2F 8-Port Gigabit Ethernet L2+ Switch, 8 x Gigabit RJ45, with 2 x 1Gb SFP, Fanless. All versions before 2.2.0D Build 135103 were discovered to transmit cookies for their web based administrative application containing usernames and passwords. These were transmitted in cleartext using simple base64 encoding during every POST request made to the server.

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
https://github.com/SwiftSecur/S3150-8T2F-FS.com-Research/wiki ExploitThird Party Advisory

Track CVE-2025-25613 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

5.4CVE-2025-25625Fs s3150-8t2f firmware cross-site scripting vulnerabilityA stored cross-site scripting vulnerability exists in FS model S3150-8T2F switches running firmware s3150-8t2f-switch-fsos-220d_118101 and web firmwa…EPSS 0.24%5.7CVE-2011-4723D-Link DIR-300 router stores passwords in cleartextThe D-Link DIR-300 router stores passwords in cleartext rather than in a protected form. Anyone who can reach the stored data can read credentials di…KEVEPSS 3.1%analysed

Source: NIST National Vulnerability Database (record CVE-2025-25613), CISA KEV, FIRST EPSS (scores of 2026-09-27). This page is refreshed as NVD updates the record.