{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2025-30485","assignerOrgId":"ede6fdc4-6654-4307-a26d-3331c018e2ce","state":"PUBLISHED","assignerShortName":"jpcert","dateReserved":"2025-03-24T00:55:23.294Z","datePublished":"2025-04-03T06:18:36.311Z","dateUpdated":"2025-04-03T13:41:26.206Z"},"containers":{"cna":{"affected":[{"vendor":"Century Systems Co., Ltd.","product":"FutureNet NXR-1420","versions":[{"version":"firmware version 31.0.1 and earlier","status":"affected"}]},{"vendor":"Century Systems Co., Ltd.","product":"FutureNet NXR-1300 series","versions":[{"version":"firmware version 7.4.12 and earlier","status":"affected"}]},{"vendor":"Century Systems Co., Ltd.","product":"FutureNet NXR-650","versions":[{"version":"firmware version 21.16.5 and earlier","status":"affected"}]},{"vendor":"Century Systems Co., Ltd.","product":"FutureNet NXR-610X series","versions":[{"version":"firmware version 21.14.11D and earlier","status":"affected"}]},{"vendor":"Century Systems Co., Ltd.","product":"FutureNet NXR-530","versions":[{"version":"firmware version 21.11.15 and earlier","status":"affected"}]},{"vendor":"Century Systems Co., Ltd.","product":"FutureNet NXR-350/C","versions":[{"version":"firmware version 5.30.9C and earlier","status":"affected"}]},{"vendor":"Century Systems Co., Ltd.","product":"FutureNet NXR-230/C","versions":[{"version":"firmware version 5.30.13 and earlier","status":"affected"}]},{"vendor":"Century Systems Co., Ltd.","product":"FutureNet NXR-160/LW","versions":[{"version":"firmware version 21.8.4 and earlier","status":"affected"}]},{"vendor":"Century Systems Co., Ltd.","product":"FutureNet NXR-G540 series","versions":[{"version":"firmware version 21.17.0","status":"affected"}]},{"vendor":"Century Systems Co., Ltd.","product":"FutureNet NXR-G260 series","versions":[{"version":"firmware version 9.12.17 and earlier","status":"affected"}]},{"vendor":"Century Systems Co., Ltd.","product":"FutureNet NXR-G240 series","versions":[{"version":"firmware version 9.12.17 and earlier","status":"affected"}]},{"vendor":"Century Systems Co., Ltd.","product":"FutureNet NXR-G180/L-CA","versions":[{"version":"firmware version 21.7.33 and earlier","status":"affected"}]},{"vendor":"Century Systems Co., Ltd.","product":"FutureNet NXR-G120 series","versions":[{"version":"firmware version 21.15.2C1 and earlier","status":"affected"}]},{"vendor":"Century Systems Co., Ltd.","product":"FutureNet NXR-G110 series","versions":[{"version":"firmware version 21.15.10 and earlier","status":"affected"}]},{"vendor":"Century Systems Co., Ltd.","product":"FutureNet NXR-G100 series","versions":[{"version":"firmware version 6.23.11 and earlier","status":"affected"}]},{"vendor":"Century Systems Co., Ltd.","product":"FutureNet NXR-G060 series","versions":[{"version":"firmware version 21.15.6C2 and earlier","status":"affected"}]},{"vendor":"Century Systems Co., Ltd.","product":"FutureNet NXR-G050 series","versions":[{"version":"firmware version 21.12.11 and earlier","status":"affected"}]},{"vendor":"Century Systems Co., Ltd.","product":"FutureNet VXR-x64","versions":[{"version":"firmware version 21.7.33 and earlier","status":"affected"}]},{"vendor":"Century Systems Co., Ltd.","product":"FutureNet VXR-x86","versions":[{"version":"firmware version 10.1.5 and earlier","status":"affected"}]},{"vendor":"Century Systems Co., Ltd.","product":"FutureNet NXR-1200","versions":[{"version":"N/A","status":"affected"}]},{"vendor":"Century Systems Co., Ltd.","product":"FutureNet NXR-130/C","versions":[{"version":"N/A","status":"affected"}]},{"vendor":"Century Systems Co., Ltd.","product":"FutureNet NXR-155/C-L","versions":[{"version":"N/A","status":"affected"}]},{"vendor":"Century Systems Co., Ltd.","product":"FutureNet NXR-155/C-XW","versions":[{"version":"N/A","status":"affected"}]},{"vendor":"Century Systems Co., Ltd.","product":"FutureNet NXR-155/C-WM","versions":[{"version":"N/A","status":"affected"}]},{"vendor":"Century Systems Co., Ltd.","product":"FutureNet NXR-125/CX","versions":[{"version":"N/A","status":"affected"}]},{"vendor":"Century Systems Co., Ltd.","product":"FutureNet NXR-120/C","versions":[{"version":"N/A","status":"affected"}]},{"vendor":"Century Systems Co., Ltd.","product":"FutureNet NXR-G100/SLW","versions":[{"version":"N/A","status":"affected"}]},{"vendor":"Century Systems Co., Ltd.","product":"FutureNet NXR-G100/SL","versions":[{"version":"N/A","status":"affected"}]},{"vendor":"Century Systems Co., Ltd.","product":"FutureNet NXR-G100/S","versions":[{"version":"N/A","status":"affected"}]},{"vendor":"Century Systems Co., Ltd.","product":"FutureNet NXR-G100/N","versions":[{"version":"N/A","status":"affected"}]},{"vendor":"Century Systems Co., Ltd.","product":"FutureNet NXR-G100/F","versions":[{"version":"N/A","status":"affected"}]},{"vendor":"Century Systems Co., Ltd.","product":"FutureNet WXR-250","versions":[{"version":"N/A","status":"affected"}]}],"descriptions":[{"lang":"en","value":"UNIX symbolic link (Symlink) following issue exists in FutureNet NXR series, VXR series and WXR series routers. Attaching to the affected product an external storage containing malicious symbolic link files, a logged-in administrative user may obtain and/or destroy internal files."}],"problemTypes":[{"descriptions":[{"description":"UNIX symbolic link (Symlink) following","lang":"en-US","cweId":"CWE-61","type":"CWE"}]}],"references":[{"url":"https://www.centurysys.co.jp/backnumber/common/jvnvu92821536.html"},{"url":"https://jvn.jp/en/vu/JVNVU92821536/"}],"metrics":[{"format":"CVSS","scenarios":[{"lang":"en-US","value":"GENERAL"}],"cvssV3_0":{"version":"3.0","baseSeverity":"MEDIUM","baseScore":6.2,"vectorString":"CVSS:3.0/AV:P/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H"}}],"providerMetadata":{"orgId":"ede6fdc4-6654-4307-a26d-3331c018e2ce","shortName":"jpcert","dateUpdated":"2025-04-03T06:18:36.311Z"}},"adp":[{"metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2025-04-03T13:39:37.971930Z","id":"CVE-2025-30485","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"title":"CISA ADP Vulnrichment","providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2025-04-03T13:41:26.206Z"}}]}}