CVE-2025-25613

HIGH

FS S3150-8T2F Firmware < 2.2.0D - Cleartext Storage of Sensitive Information in Web Admin Cookies

Title source: llm
STIX 2.1

Description

FS Inc S3150-8T2F 8-Port Gigabit Ethernet L2+ Switch, 8 x Gigabit RJ45, with 2 x 1Gb SFP, Fanless. All versions before 2.2.0D Build 135103 were discovered to transmit cookies for their web based administrative application containing usernames and passwords. These were transmitted in cleartext using simple base64 encoding during every POST request made to the server.

References (3)

Core 3
Core References
Product
http://fs.com
Broken Link
http://s3150-8t2f.com

Scores

CVSS v3 7.5
EPSS 0.0023
EPSS Percentile 13.1%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

CISA SSVC

Vulnrichment
Exploitation none
Automatable yes
Technical Impact partial

Details

CWE
CWE-312
Status published
Products (1)
fs/s3150-8t2f_firmware < 2.2.0D
Published Nov 20, 2025
Tracked Since Feb 18, 2026