CVE-2025-30485
UNIX symbolic link (Symlink) following issue exists in FutureNet NXR series, VXR series and WXR...
UNIX symbolic link (Symlink) following issue exists in FutureNet NXR series, VXR series and WXR series routers. Attaching to the affected product an external storage containing malicious symbolic link files, a logged-in administrative user may obtain and/or destroy internal files.
Attack profile
How easy it is to exploit
- Attack vector
- Physical
- Complexity
- Low
- Privileges needed
- High
- User interaction
- None
What an attacker can affect
- Confidentiality
- High
- Integrity
- High
- Availability
- High
Exploit likelihood
What each source reports
CVE List Score used
UNIX symbolic link (Symlink) following issue exists in FutureNet NXR series, VXR series and WXR series routers. Attaching to the affected product an external storage containing malicious symbolic link files, a logged-in administrative user may obtain and/or destroy internal files.
- Record
CVE-2025-30485- CVSS 3.0
- 6.2 Medium
CVSS:3.0/AV:P/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H - Weakness
- CWE-61
- Updated
- 2026-11-02
EUVDEUVD-2025-9602
UNIX symbolic link (Symlink) following issue exists in FutureNet NXR series, VXR series and WXR series routers. Attaching to the affected product an external storage containing malicious symbolic link files, a logged-in administrative user may obtain and/or destroy internal files.
- Record
EUVD-2025-9602- CVSS 3.0
- 6.2 Medium
CVSS:3.0/AV:P/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
GitHub AdvisoriesGHSA-g6qj-9f49-6c8c
UNIX symbolic link (Symlink) following issue exists in FutureNet NXR series, VXR series and WXR...
UNIX symbolic link (Symlink) following issue exists in FutureNet NXR series, VXR series and WXR series routers. Attaching to the affected product an external storage containing malicious symbolic link files, a logged-in administrative user may obtain and/or destroy internal files.
- Record
GHSA-g6qj-9f49-6c8c- CVSS 3.0
- 6.2 Medium
CVSS:3.0/AV:P/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H - Weakness
- CWE-61
- Updated
- 2026-11-02
NVD
UNIX symbolic link (Symlink) following issue exists in FutureNet NXR series, VXR series and WXR series routers. Attaching to the affected product an external storage containing malicious symbolic link files, a logged-in administrative user may obtain and/or destroy internal files.
- Record
CVE-2025-30485- CVSS 3.0
- 6.2 Medium
CVSS:3.0/AV:P/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H - Weakness
- CWE-61
- Updated
- 2026-11-02
Affected products
- century systems co., ltd. futurenet nxr-120/c
- century systems co., ltd. futurenet nxr-1200
- century systems co., ltd. futurenet nxr-125/cx
- century systems co., ltd. futurenet nxr-130/c
- century systems co., ltd. futurenet nxr-1300 series
- century systems co., ltd. futurenet nxr-1420
- century systems co., ltd. futurenet nxr-155/c-l
- century systems co., ltd. futurenet nxr-155/c-wm
- century systems co., ltd. futurenet nxr-155/c-xw
- century systems co., ltd. futurenet nxr-160/lw
- century systems co., ltd. futurenet nxr-230/c
- century systems co., ltd. futurenet nxr-350/c
Show 20 moreShow less
- century systems co., ltd. futurenet nxr-530
- century systems co., ltd. futurenet nxr-610x series
- century systems co., ltd. futurenet nxr-650
- century systems co., ltd. futurenet nxr-g050 series
- century systems co., ltd. futurenet nxr-g060 series
- century systems co., ltd. futurenet nxr-g100 series
- century systems co., ltd. futurenet nxr-g100/f
- century systems co., ltd. futurenet nxr-g100/n
- century systems co., ltd. futurenet nxr-g100/s
- century systems co., ltd. futurenet nxr-g100/sl
- century systems co., ltd. futurenet nxr-g100/slw
- century systems co., ltd. futurenet nxr-g110 series
- century systems co., ltd. futurenet nxr-g120 series
- century systems co., ltd. futurenet nxr-g180/l-ca
- century systems co., ltd. futurenet nxr-g240 series
- century systems co., ltd. futurenet nxr-g260 series
- century systems co., ltd. futurenet nxr-g540 series
- century systems co., ltd. futurenet vxr-x64
- century systems co., ltd. futurenet vxr-x86
- century systems co., ltd. futurenet wxr-250
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | CVE List, EUVD, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2025-30485 is a medium vulnerability (CVSS 6.2) in Century Systems Co., Ltd. Futurenet Nxr-120/c, published April 3, 2025. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.32%, the 25th percentile. No source names a fixed version.