{"id":"CVE-2025-30485","state":"PUBLISHED","title":"UNIX symbolic link (Symlink) following issue exists in FutureNet NXR series, VXR series and WXR series routers. Attaching to the affected product an external storage containing mal","description":"UNIX symbolic link (Symlink) following issue exists in FutureNet NXR series, VXR series and WXR series routers. Attaching to the affected product an external storage containing malicious symbolic link files, a logged-in administrative user may obtain and/or destroy internal files.","publishedAt":"2025-04-03T06:18:36.311Z","updatedAt":"2025-04-03T13:41:26.206Z","severity":{"score":6.2,"label":"Medium","version":"3.0","vector":"CVSS:3.0/AV:P/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","source":"jpcert"},"assigner":"jpcert","products":["Century Systems Co., Ltd. FutureNet NXR-1420","Century Systems Co., Ltd. FutureNet NXR-1300 series","Century Systems Co., Ltd. FutureNet NXR-650","Century Systems Co., Ltd. FutureNet NXR-610X series","Century Systems Co., Ltd. FutureNet NXR-530","Century Systems Co., Ltd. FutureNet NXR-350/C","Century Systems Co., Ltd. FutureNet NXR-230/C","Century Systems Co., Ltd. FutureNet NXR-160/LW","Century Systems Co., Ltd. FutureNet NXR-G540 series","Century Systems Co., Ltd. FutureNet NXR-G260 series","Century Systems Co., Ltd. FutureNet NXR-G240 series","Century Systems Co., Ltd. FutureNet NXR-G180/L-CA","Century Systems Co., Ltd. FutureNet NXR-G120 series","Century Systems Co., Ltd. FutureNet NXR-G110 series","Century Systems Co., Ltd. FutureNet NXR-G100 series","Century Systems Co., Ltd. FutureNet NXR-G060 series","Century Systems Co., Ltd. FutureNet NXR-G050 series","Century Systems Co., Ltd. FutureNet VXR-x64","Century Systems Co., Ltd. FutureNet VXR-x86","Century Systems Co., Ltd. FutureNet NXR-1200","Century Systems Co., Ltd. FutureNet NXR-130/C","Century Systems Co., Ltd. FutureNet NXR-155/C-L","Century Systems Co., Ltd. FutureNet NXR-155/C-XW","Century Systems Co., Ltd. FutureNet NXR-155/C-WM","Century Systems Co., Ltd. FutureNet NXR-125/CX","Century Systems Co., Ltd. FutureNet NXR-120/C","Century Systems Co., Ltd. FutureNet NXR-G100/SLW","Century Systems Co., Ltd. FutureNet NXR-G100/SL","Century Systems Co., Ltd. FutureNet NXR-G100/S","Century Systems Co., Ltd. FutureNet NXR-G100/N","Century Systems Co., Ltd. FutureNet NXR-G100/F","Century Systems Co., Ltd. FutureNet WXR-250"],"affected":[{"vendor":"Century Systems Co., Ltd.","product":"FutureNet NXR-1420","versions":[{"version":"firmware version 31.0.1 and earlier","status":"affected"}]},{"vendor":"Century Systems Co., Ltd.","product":"FutureNet NXR-1300 series","versions":[{"version":"firmware version 7.4.12 and earlier","status":"affected"}]},{"vendor":"Century Systems Co., Ltd.","product":"FutureNet NXR-650","versions":[{"version":"firmware version 21.16.5 and earlier","status":"affected"}]},{"vendor":"Century Systems Co., Ltd.","product":"FutureNet NXR-610X series","versions":[{"version":"firmware version 21.14.11D and earlier","status":"affected"}]},{"vendor":"Century Systems Co., Ltd.","product":"FutureNet NXR-530","versions":[{"version":"firmware version 21.11.15 and earlier","status":"affected"}]},{"vendor":"Century Systems Co., Ltd.","product":"FutureNet NXR-350/C","versions":[{"version":"firmware version 5.30.9C and earlier","status":"affected"}]},{"vendor":"Century Systems Co., Ltd.","product":"FutureNet NXR-230/C","versions":[{"version":"firmware version 5.30.13 and earlier","status":"affected"}]},{"vendor":"Century Systems Co., Ltd.","product":"FutureNet NXR-160/LW","versions":[{"version":"firmware version 21.8.4 and earlier","status":"affected"}]},{"vendor":"Century Systems Co., Ltd.","product":"FutureNet NXR-G540 series","versions":[{"version":"firmware version 21.17.0","status":"affected"}]},{"vendor":"Century Systems Co., Ltd.","product":"FutureNet NXR-G260 series","versions":[{"version":"firmware version 9.12.17 and earlier","status":"affected"}]},{"vendor":"Century Systems Co., Ltd.","product":"FutureNet NXR-G240 series","versions":[{"version":"firmware version 9.12.17 and earlier","status":"affected"}]},{"vendor":"Century Systems Co., Ltd.","product":"FutureNet NXR-G180/L-CA","versions":[{"version":"firmware version 21.7.33 and earlier","status":"affected"}]},{"vendor":"Century Systems Co., Ltd.","product":"FutureNet NXR-G120 series","versions":[{"version":"firmware version 21.15.2C1 and earlier","status":"affected"}]},{"vendor":"Century Systems Co., Ltd.","product":"FutureNet NXR-G110 series","versions":[{"version":"firmware version 21.15.10 and earlier","status":"affected"}]},{"vendor":"Century Systems Co., Ltd.","product":"FutureNet NXR-G100 series","versions":[{"version":"firmware version 6.23.11 and earlier","status":"affected"}]},{"vendor":"Century Systems Co., Ltd.","product":"FutureNet NXR-G060 series","versions":[{"version":"firmware version 21.15.6C2 and earlier","status":"affected"}]},{"vendor":"Century Systems Co., Ltd.","product":"FutureNet NXR-G050 series","versions":[{"version":"firmware version 21.12.11 and earlier","status":"affected"}]},{"vendor":"Century Systems Co., Ltd.","product":"FutureNet VXR-x64","versions":[{"version":"firmware version 21.7.33 and earlier","status":"affected"}]},{"vendor":"Century Systems Co., Ltd.","product":"FutureNet VXR-x86","versions":[{"version":"firmware version 10.1.5 and earlier","status":"affected"}]},{"vendor":"Century Systems Co., Ltd.","product":"FutureNet NXR-1200","versions":[{"version":"N/A","status":"affected"}]},{"vendor":"Century Systems Co., Ltd.","product":"FutureNet NXR-130/C","versions":[{"version":"N/A","status":"affected"}]},{"vendor":"Century Systems Co., Ltd.","product":"FutureNet NXR-155/C-L","versions":[{"version":"N/A","status":"affected"}]},{"vendor":"Century Systems Co., Ltd.","product":"FutureNet NXR-155/C-XW","versions":[{"version":"N/A","status":"affected"}]},{"vendor":"Century Systems Co., Ltd.","product":"FutureNet NXR-155/C-WM","versions":[{"version":"N/A","status":"affected"}]},{"vendor":"Century Systems Co., Ltd.","product":"FutureNet NXR-125/CX","versions":[{"version":"N/A","status":"affected"}]},{"vendor":"Century Systems Co., Ltd.","product":"FutureNet NXR-120/C","versions":[{"version":"N/A","status":"affected"}]},{"vendor":"Century Systems Co., Ltd.","product":"FutureNet NXR-G100/SLW","versions":[{"version":"N/A","status":"affected"}]},{"vendor":"Century Systems Co., Ltd.","product":"FutureNet NXR-G100/SL","versions":[{"version":"N/A","status":"affected"}]},{"vendor":"Century Systems Co., Ltd.","product":"FutureNet NXR-G100/S","versions":[{"version":"N/A","status":"affected"}]},{"vendor":"Century Systems Co., Ltd.","product":"FutureNet NXR-G100/N","versions":[{"version":"N/A","status":"affected"}]},{"vendor":"Century Systems Co., Ltd.","product":"FutureNet NXR-G100/F","versions":[{"version":"N/A","status":"affected"}]},{"vendor":"Century Systems Co., Ltd.","product":"FutureNet WXR-250","versions":[{"version":"N/A","status":"affected"}]}],"references":["https://www.centurysys.co.jp/backnumber/common/jvnvu92821536.html","https://jvn.jp/en/vu/JVNVU92821536/"],"weaknesses":["CWE-61"],"ingestedAt":"2026-10-29T20:08:55.257Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2025/30xxx/CVE-2025-30485.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2025-30485","state":"PUBLISHED","datePublished":"2025-04-03T06:18:36.311Z","dateUpdated":"2025-04-03T13:41:26.206Z","assignerShortName":"jpcert","assignerOrgId":"ede6fdc4-6654-4307-a26d-3331c018e2ce","dateReserved":"2025-03-24T00:55:23.294Z"},"containers":{"cna":{"descriptions":[{"lang":"en","value":"UNIX symbolic link (Symlink) following issue exists in FutureNet NXR series, VXR series and WXR series routers. Attaching to the affected product an external storage containing malicious symbolic link files, a logged-in administrative user may obtain and/or destroy internal files."}],"affected":[{"vendor":"Century Systems Co., Ltd.","product":"FutureNet NXR-1420","versions":[{"version":"firmware version 31.0.1 and earlier","status":"affected"}]},{"vendor":"Century Systems Co., Ltd.","product":"FutureNet NXR-1300 series","versions":[{"version":"firmware version 7.4.12 and earlier","status":"affected"}]},{"vendor":"Century Systems Co., Ltd.","product":"FutureNet NXR-650","versions":[{"version":"firmware version 21.16.5 and earlier","status":"affected"}]},{"vendor":"Century Systems Co., Ltd.","product":"FutureNet NXR-610X series","versions":[{"version":"firmware version 21.14.11D and earlier","status":"affected"}]},{"vendor":"Century Systems Co., Ltd.","product":"FutureNet NXR-530","versions":[{"version":"firmware version 21.11.15 and earlier","status":"affected"}]},{"vendor":"Century Systems Co., Ltd.","product":"FutureNet NXR-350/C","versions":[{"version":"firmware version 5.30.9C and earlier","status":"affected"}]},{"vendor":"Century Systems Co., Ltd.","product":"FutureNet NXR-230/C","versions":[{"version":"firmware version 5.30.13 and earlier","status":"affected"}]},{"vendor":"Century Systems Co., Ltd.","product":"FutureNet NXR-160/LW","versions":[{"version":"firmware version 21.8.4 and earlier","status":"affected"}]},{"vendor":"Century Systems Co., Ltd.","product":"FutureNet NXR-G540 series","versions":[{"version":"firmware version 21.17.0","status":"affected"}]},{"vendor":"Century Systems Co., Ltd.","product":"FutureNet NXR-G260 series","versions":[{"version":"firmware version 9.12.17 and earlier","status":"affected"}]},{"vendor":"Century Systems Co., Ltd.","product":"FutureNet NXR-G240 series","versions":[{"version":"firmware version 9.12.17 and earlier","status":"affected"}]},{"vendor":"Century Systems Co., Ltd.","product":"FutureNet NXR-G180/L-CA","versions":[{"version":"firmware version 21.7.33 and earlier","status":"affected"}]},{"vendor":"Century Systems Co., Ltd.","product":"FutureNet NXR-G120 series","versions":[{"version":"firmware version 21.15.2C1 and earlier","status":"affected"}]},{"vendor":"Century Systems Co., Ltd.","product":"FutureNet NXR-G110 series","versions":[{"version":"firmware version 21.15.10 and earlier","status":"affected"}]},{"vendor":"Century Systems Co., Ltd.","product":"FutureNet NXR-G100 series","versions":[{"version":"firmware version 6.23.11 and earlier","status":"affected"}]},{"vendor":"Century Systems Co., Ltd.","product":"FutureNet NXR-G060 series","versions":[{"version":"firmware version 21.15.6C2 and earlier","status":"affected"}]},{"vendor":"Century Systems Co., Ltd.","product":"FutureNet NXR-G050 series","versions":[{"version":"firmware version 21.12.11 and earlier","status":"affected"}]},{"vendor":"Century Systems Co., Ltd.","product":"FutureNet VXR-x64","versions":[{"version":"firmware version 21.7.33 and earlier","status":"affected"}]},{"vendor":"Century Systems Co., Ltd.","product":"FutureNet VXR-x86","versions":[{"version":"firmware version 10.1.5 and earlier","status":"affected"}]},{"vendor":"Century Systems Co., Ltd.","product":"FutureNet NXR-1200","versions":[{"version":"N/A","status":"affected"}]},{"vendor":"Century Systems Co., Ltd.","product":"FutureNet NXR-130/C","versions":[{"version":"N/A","status":"affected"}]},{"vendor":"Century Systems Co., Ltd.","product":"FutureNet NXR-155/C-L","versions":[{"version":"N/A","status":"affected"}]},{"vendor":"Century Systems Co., Ltd.","product":"FutureNet NXR-155/C-XW","versions":[{"version":"N/A","status":"affected"}]},{"vendor":"Century Systems Co., Ltd.","product":"FutureNet NXR-155/C-WM","versions":[{"version":"N/A","status":"affected"}]},{"vendor":"Century Systems Co., Ltd.","product":"FutureNet NXR-125/CX","versions":[{"version":"N/A","status":"affected"}]},{"vendor":"Century Systems Co., Ltd.","product":"FutureNet NXR-120/C","versions":[{"version":"N/A","status":"affected"}]},{"vendor":"Century Systems Co., Ltd.","product":"FutureNet NXR-G100/SLW","versions":[{"version":"N/A","status":"affected"}]},{"vendor":"Century Systems Co., Ltd.","product":"FutureNet NXR-G100/SL","versions":[{"version":"N/A","status":"affected"}]},{"vendor":"Century Systems Co., Ltd.","product":"FutureNet NXR-G100/S","versions":[{"version":"N/A","status":"affected"}]},{"vendor":"Century Systems Co., Ltd.","product":"FutureNet NXR-G100/N","versions":[{"version":"N/A","status":"affected"}]},{"vendor":"Century Systems Co., Ltd.","product":"FutureNet NXR-G100/F","versions":[{"version":"N/A","status":"affected"}]},{"vendor":"Century Systems Co., Ltd.","product":"FutureNet WXR-250","versions":[{"version":"N/A","status":"affected"}]}],"references":[{"url":"https://www.centurysys.co.jp/backnumber/common/jvnvu92821536.html"},{"url":"https://jvn.jp/en/vu/JVNVU92821536/"}],"metrics":[{"format":"CVSS","scenarios":[{"lang":"en-US","value":"GENERAL"}],"cvssV3_0":{"version":"3.0","baseSeverity":"MEDIUM","baseScore":6.2,"vectorString":"CVSS:3.0/AV:P/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H"}}],"problemTypes":[{"descriptions":[{"cweId":"CWE-61","description":"UNIX symbolic link (Symlink) following","lang":"en-US","type":"CWE"}]}],"providerMetadata":{"shortName":"jpcert","orgId":"ede6fdc4-6654-4307-a26d-3331c018e2ce","dateUpdated":"2025-04-03T06:18:36.311Z"}},"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2025-04-03T13:39:37.971930Z","id":"CVE-2025-30485","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2025-04-03T13:41:26.206Z"}}]}}}