Unauthorized Access Flaw in Century Systems' FutureNet MA and IP-K Series Products
CVE-2025-58152

6.9MEDIUM

What is CVE-2025-58152?

An unauthorized access vulnerability has been discovered in Century Systems' FutureNet MA and IP-K series. This flaw allows an attacker to access sensitive information including firmware version and garbage collection details via crafted HTTP requests on the internal web page, all without requiring authentication. This could potentially lead to further exploitation if the information is misused.

Affected Version(s)

FutureNet IP-K series from 2.0.0 to 2.2.1

FutureNet MA-E300 series from 5.0.0 to 6.2.1

FutureNet MA-P series from 5.0.0 to 6.4.0

References

CVSS V4

Score:
6.9
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.
CVE-2025-58152 : Unauthorized Access Flaw in Century Systems' FutureNet MA and IP-K Series Products