CVE-2025-30485CWE-61

UNIX symbolic link (Symlink) following issue exists in FutureNet NXR series, VXR series and WXR series routers

Medium · published April 3, 2025

CVSS v3.0
6.2
EPSS
0%
Percentile
23.5
In the wild
Unconfirmed
What it is

UNIX symbolic link (Symlink) following issue exists in FutureNet NXR series, VXR series and WXR series routers. Attaching to the affected product an external storage containing malicious symbolic link files, a logged-in administrative user may obtain and/or destroy internal files.

The record
Technical detail
CVSS v3.0
6.2 · MEDIUM
Vector
CVSS:3.0/AV:P/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00318 · 23.5th percentile
Weakness
CWE-61 · UNIX Symbolic Link (Symlink) Following
Published
2025-04-03T06:18Z
EPSS history
Timeline
  • 03 APR 06:18Z
    UNIX symbolic link (Symlink) following issue exists in FutureNet NXR series, VXR series and WXR series routers
    cvelistv5