CVE-2025-58152

MediumCVSS 5.3/10Last modified Oct 18, 2026

Description

FutureNet MA and IP-K series provided by Century Systems Co., Ltd. put the firmware version and the garbage collection information on the internal web page. With some crafted HTTP request, they can be accessed without authentication.

Metrics

CVSS 3.1 5.3/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Weakness enumeration

CWE-552

Affected software

Vendor	Product	Versions
Century Systems Co., Ltd.	FutureNet MA-X series	from 6.0.0 to 6.4.1
Century Systems Co., Ltd.	FutureNet MA-E300 series	from 5.0.0 to 6.2.1
Century Systems Co., Ltd.	FutureNet MA-S series	from 5.0.0 to 6.4.0
Century Systems Co., Ltd.	FutureNet MA-P series	from 5.0.0 to 6.4.0
Century Systems Co., Ltd.	FutureNet IP-K series	from 2.0.0 to 2.2.1

References

Timeline

Published: Oct 31, 2025
Last modified: Oct 18, 2026
NVD status: Deferred

Related CVEs from 2025

CVE-2025-581535.9Under undisclosed traffic conditions along with conditions beyond the attacker's control, hardware systems with a High-Speed Bridge (HSB) ma CVE-2025-581564.3Centurion ERP is an ERP with a focus on ITSM and automation. In versions starting from 1.12.0 to before 1.21.0, an authenticated user can vi CVE-2025-581577.5gnark is a zero-knowledge proof system framework. In version 0.12.0, there is a potential denial of service vulnerability when computing sca CVE-2025-581588.8Harness Open Source is an end-to-end developer platform with Source Control Management, CI/CD Pipelines, Hosted Developer Environments, and CVE-2025-581598.8WeGIA is a Web manager for charitable institutions. Prior to version 3.4.11, a remote code execution vulnerability was identified, caused by CVE-2025-58164.3The Plugin Pengiriman WooCommerce Kurir Reguler, Instan, Kargo – Biteship plugin for WordPress is vulnerable to Insecure Direct Object Refer CVE-2025-581602.3tracing is a framework for instrumenting Rust programs to collect structured, event-based diagnostic information. Prior to version 0.3.20, t CVE-2025-581614.3MobSF is a mobile application security testing tool used. In version 4.4.0, the GET /download/ route uses string path verification via os.pa CVE-2025-581626.5MobSF is a mobile application security testing tool used. In version 4.4.0, an authenticated user who uploaded a specially prepared one.a, c CVE-2025-581638.8FreeScout is a free help desk and shared inbox built with PHP's Laravel framework. Versions 1.8.185 and earlier contain a deserialization of CVE-2025-58177.2The Amazon Products to WooCommerce plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 1 CVE-2025-581725.3drawnix is an all in one open-source whiteboard tool. In drawnix versions through 0.2.1, a cross-site scripting (XSS) vulnerability exists i