VulnerabilityDeferred

CVE-2025-25280

Buffer overflow vulnerability exists in FutureNet AS series (Industrial Routers) and FA series (Protocol Conversion Machine) provided by Century Systems Co., Ltd.

MEDIUM 5.3EPSS 0.50%

Does this matter?

Lower severity and a low EPSS score (0.50%). Track it; it rarely justifies an emergency change on its own.

Description

Buffer overflow vulnerability exists in FutureNet AS series (Industrial Routers) and FA series (Protocol Conversion Machine) provided by Century Systems Co., Ltd. If this vulnerability is exploited, a remote unauthenticated attacker may reboot the device by sending a specially crafted request.

CVSS 3.1: 5.3 MEDIUMCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
EPSS: 0.50% probability · 42th percentile
CISA KEV: Not listed
Weakness: CWE-120
Source: vultures@jpcert.or.jp

References

https://jvn.jp/en/vu/JVNVU96398949/
https://www.centurysys.co.jp/backnumber/common/jvnvu96398949.html

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.