Symlink Vulnerability in FutureNet Routers
CVE-2025-30485

6.2MEDIUM

What is CVE-2025-30485?

A symlink vulnerability has been identified in FutureNet's NXR, VXR, and WXR series routers. This flaw allows an attacker to exploit the system by attaching external storage with malicious symbolic link files. If an administrative user is logged in, they may inadvertently access or overwrite internal system files, potentially leading to data loss or corruption. It is essential to address this vulnerability promptly to maintain the integrity of the network and ensure secure operations.

Affected Version(s)

FutureNet NXR-120/C

FutureNet NXR-1200

FutureNet NXR-125/CX

References

CVSS V3.0

Score:
6.2
Severity:
MEDIUM
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Physical
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.