CVE-2025-30485 - CVE House

Status published Medium CVE-2025-30485

UNIX symbolic link (Symlink) following issue exists in FutureNet NXR...

6.2 CVSS

Vulnerability Description

UNIX symbolic link (Symlink) following issue exists in FutureNet NXR series, VXR series and WXR series routers. Attaching to the affected product an external storage containing malicious symbolic link files, a logged-in administrative user may obtain and/or destroy internal files.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2025-30485

Check My Exposure

Credits & Attribution

No credits recorded in the NVD database.

References

More from Century Systems Co., Ltd.

View All →

CVE-2025-58152

FutureNet MA and IP-K series provided by Century Systems Co.,...

Medium 6.9

CVE-2025-54763

FutureNet MA and IP-K series provided by Century Systems Co.,...

High 8.6

CVE-2025-25280

Buffer overflow vulnerability exists in FutureNet AS series (Industrial Routers)...

Medium 5.3

CVE-2025-24846

Authentication bypass vulnerability exists in FutureNet AS series (Industrial Routers)...

High 7.5

CVE-2024-50357

FutureNet NXR series routers provided by Century Systems Co., Ltd....

Critical 9.8

Affected Vendor

Century Systems Co., Ltd.

View all reports →

Affected Software

FutureNet NXR-1420, FutureNet NXR-1300 series, FutureNet NXR-650, FutureNet NXR-610X series, FutureNet NXR-530, FutureNet NXR-350/C, FutureNet NXR-230/C, FutureNet NXR-160/LW, FutureNet NXR-G540 series, FutureNet NXR-G260 series, FutureNet NXR-G240 series, FutureNet NXR-G180/L-CA, FutureNet NXR-G120 series, FutureNet NXR-G110 series, FutureNet NXR-G100 series, FutureNet NXR-G060 series, FutureNet NXR-G050 series, FutureNet VXR-x64, FutureNet VXR-x86, FutureNet NXR-1200, FutureNet NXR-130/C, FutureNet NXR-155/C-L, FutureNet NXR-155/C-XW, FutureNet NXR-155/C-WM, FutureNet NXR-125/CX, FutureNet NXR-120/C, FutureNet NXR-G100/SLW, FutureNet NXR-G100/SL, FutureNet NXR-G100/S, FutureNet NXR-G100/N, FutureNet NXR-G100/F, FutureNet WXR-250

Vulnerable Versions:

firmware version 31.0.1 and earlier, firmware version 7.4.12 and earlier, firmware version 21.16.5 and earlier, firmware version 21.14.11D and earlier, firmware version 21.11.15 and earlier, firmware version 5.30.9C and earlier, firmware version 5.30.13 and earlier, firmware version 21.8.4 and earlier, firmware version 21.17.0, firmware version 9.12.17 and earlier, firmware version 21.7.33 and earlier, firmware version 21.15.2C1 and earlier, firmware version 21.15.10 and earlier, firmware version 6.23.11 and earlier, firmware version 21.15.6C2 and earlier, firmware version 21.12.11 and earlier, firmware version 10.1.5 and earlier

Timeline

Official Publish: April 3rd, 2025

Last Modified: April 3rd, 2025

Added to House: July 22nd, 2026

CVSS Vectors

V3: CVSS:3.0/AV:P/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Weaknesses (CWE)

CWE-61

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.