CVE-2025-30485: Century Systems Co., Ltd Futurenet Nxr-120/c
Medium severity, CVSS 6.2. EPSS: 0.3% chance of exploitation in the next 30 days.
UNIX symbolic link (Symlink) following issue exists in FutureNet NXR series, VXR series and WXR series routers. Attaching to the affected product an external storage containing malicious symbolic link files, a logged-in administrative user may obtain and/or destroy internal files.
Affected products
- Century Systems Co., Ltd Futurenet Nxr-120/c: affected versions not specified
- Century Systems Co., Ltd Futurenet Nxr-1200: affected versions not specified
- Century Systems Co., Ltd Futurenet Nxr-125/cx: affected versions not specified
- Century Systems Co., Ltd Futurenet Nxr-130/c: affected versions not specified
- Century Systems Co., Ltd Futurenet Nxr-1300 Series: up to and including 7.4.12
- Century Systems Co., Ltd Futurenet Nxr-1420: up to and including 31.0.1
- Century Systems Co., Ltd Futurenet Nxr-155/c-L: affected versions not specified
- Century Systems Co., Ltd Futurenet Nxr-155/c-Wm: affected versions not specified
- Century Systems Co., Ltd Futurenet Nxr-155/c-Xw: affected versions not specified
- Century Systems Co., Ltd Futurenet Nxr-160/lw: up to and including 21.8.4
- Century Systems Co., Ltd Futurenet Nxr-230/c: up to and including 5.30.13
- Century Systems Co., Ltd Futurenet Nxr-350/c: up to and including 5.30.9C
- Century Systems Co., Ltd Futurenet Nxr-530: up to and including 21.11.15
- Century Systems Co., Ltd Futurenet Nxr-610x Series: up to and including 21.14.11D
- Century Systems Co., Ltd Futurenet Nxr-650: up to and including 21.16.5
- Century Systems Co., Ltd Futurenet Nxr-g050 Series: up to and including 21.12.11
- Century Systems Co., Ltd Futurenet Nxr-g060 Series: up to and including 21.15.6C2
- Century Systems Co., Ltd Futurenet Nxr-g100/f: affected versions not specified
- Century Systems Co., Ltd Futurenet Nxr-g100/n: affected versions not specified
- Century Systems Co., Ltd Futurenet Nxr-g100/s: affected versions not specified
- Century Systems Co., Ltd Futurenet Nxr-g100/sl: affected versions not specified
- Century Systems Co., Ltd Futurenet Nxr-g100/slw: affected versions not specified
- Century Systems Co., Ltd Futurenet Nxr-g100 Series: up to and including 6.23.11
- Century Systems Co., Ltd Futurenet Nxr-g110 Series: up to and including 21.15.10
- Century Systems Co., Ltd Futurenet Nxr-g120 Series: up to and including 21.15.2C1
- and 7 more
Published 2025-04-03. Last modified 2026-06-17.