CVE-2025-25613

FS Inc S3150-8T2F 8-Port Gigabit Ethernet L2+ Switch, 8 x Gigabit RJ45, with 2 x 1Gb SFP, Fanless

High · published November 20, 2025

CVSS v3.1
7.5
EPSS
0%
Percentile
15.5
In the wild
Unconfirmed
What it is

⚡ Your switch is spilling secrets! Any admin using versions before 2.2.0D Build 135103 is sending usernames and passwords in plain view with every click — yikes! 🔥 Think of it as a restaurant where the chef reads out orders without any privacy screen; everyone in earshot can hear what’s being cooked, including sensitive ingredients. That’s what’s happening with these cookies on your network! An attacker on the same network could effortlessly intercept these cleartext cookies, gaining access to administrative credentials. This could lead to unauthorized control over the switch, allowing malicious actions like network disruption or data interception.

Put simply

Think of it as a restaurant where the chef reads out orders without any privacy screen; everyone in earshot can hear what’s being cooked, including sensitive ingredients. That’s what’s happening with these cookies on your network! This vulnerability allows administrative credentials to be transmitted in cleartext using base64 encoding during POST requests. As a result, an attacker could capture sensitive data without any authentication barriers.

What to do

An attacker on the same network could effortlessly intercept these cleartext cookies, gaining access to administrative credentials. This could lead to unauthorized control over the switch, allowing malicious actions like network disruption or data interception. Upgrade your FS Inc S3150-8T2F to version 2.2.0D Build 135103 or later immediately. Implement secure transmission practices, such as using HTTPS, to protect sensitive data from prying eyes. This fix is straightforward! Get that upgrade done and you’ll be one step closer to achieving security hero status! 🛡️

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00251 · 15.5th percentile
Published
2025-11-20T00:00Z
EPSS history
Timeline
  • 20 NOV 00:00Z
    FS Inc S3150-8T2F 8-Port Gigabit Ethernet L2+ Switch, 8 x Gigabit RJ45, with 2 x 1Gb SFP, Fanless
    cvelistv5