{"id":"CVE-2025-25280","aliases":["EUVD-2025-5804","GHSA-vr9j-f779-6jqx"],"status":"published","title":"Buffer overflow vulnerability exists in FutureNet AS series (Industrial Routers) and FA series ...","description":"Buffer overflow vulnerability exists in FutureNet AS series (Industrial Routers) and FA series (Protocol Conversion Machine) provided by Century Systems Co., Ltd. If this vulnerability is exploited, a remote unauthenticated attacker may reboot the device by sending a specially crafted request.","severity":{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-09","score":0.00514,"percentile":0.44059,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-120"],"published":"2025-03-03T08:25:16Z","modified":"2026-06-17T09:00:36Z","products":[{"vendor":"century systems co., ltd.","product":"futurenet as-210/u4"},{"vendor":"century systems co., ltd.","product":"futurenet as-250/f-ko"},{"vendor":"century systems co., ltd.","product":"futurenet as-250/f-sc"},{"vendor":"century systems co., ltd.","product":"futurenet as-250/kl"},{"vendor":"century systems co., ltd.","product":"futurenet as-250/kl rev2"},{"vendor":"century systems co., ltd.","product":"futurenet as-250/l"},{"vendor":"century systems co., ltd.","product":"futurenet as-250/nl"},{"vendor":"century systems co., ltd.","product":"futurenet as-250/s"},{"vendor":"century systems co., ltd.","product":"futurenet as-m250/kl"},{"vendor":"century systems co., ltd.","product":"futurenet as-m250/l"},{"vendor":"century systems co., ltd.","product":"futurenet as-m250/nl"},{"vendor":"century systems co., ltd.","product":"futurenet as-p250/kl"},{"vendor":"century systems co., ltd.","product":"futurenet as-p250/nl"},{"vendor":"century systems co., ltd.","product":"futurenet fa-210"},{"vendor":"century systems co., ltd.","product":"futurenet fa-215"}],"references":[{"url":"https://www.centurysys.co.jp/backnumber/common/jvnvu96398949.html"},{"url":"https://jvn.jp/en/vu/JVNVU96398949/"},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-25280"},{"url":"https://jvn.jp/en/vu/JVNVU96398949"},{"url":"https://github.com/advisories/GHSA-vr9j-f779-6jqx"}],"sources":{"cve":[{"id":"CVE-2025-25280","description":"Buffer overflow vulnerability exists in FutureNet AS series (Industrial Routers) and FA series (Protocol Conversion Machine) provided by Century Systems Co., Ltd. If this vulnerability is exploited, a remote unauthenticated attacker may reboot the device by sending a specially crafted request.","status":"published","published":"2025-03-03T08:25:16.938Z","modified":"2025-03-03T14:53:08.462Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"medium","assessor":"cna"}],"cwes":["CWE-120"],"updated_at":"2026-11-02T14:32:31.971896Z"}],"euvd":[{"id":"EUVD-2025-5804","description":"Buffer overflow vulnerability exists in FutureNet AS series (Industrial Routers) and FA series (Protocol Conversion Machine) provided by Century Systems Co., Ltd. If this vulnerability is exploited, a remote unauthenticated attacker may reboot the device by sending a specially crafted request.","status":"published","published":"2025-03-03T08:25:16Z","modified":"2025-03-03T14:53:08Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"medium"}],"updated_at":"2026-11-02T20:53:18.061162Z"}],"ghsa":[{"id":"GHSA-vr9j-f779-6jqx","title":"Buffer overflow vulnerability exists in FutureNet AS series (Industrial Routers) and FA series ...","description":"Buffer overflow vulnerability exists in FutureNet AS series (Industrial Routers) and FA series (Protocol Conversion Machine) provided by Century Systems Co., Ltd. If this vulnerability is exploited, a remote unauthenticated attacker may reboot the device by sending a specially crafted request.","status":"published","published":"2025-03-03T09:30:36Z","modified":"2025-03-03T09:30:41Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"medium"}],"cwes":["CWE-120"],"updated_at":"2026-11-02T15:00:06.693368Z"}],"nvd":[{"id":"CVE-2025-25280","description":"Buffer overflow vulnerability exists in FutureNet AS series (Industrial Routers) and FA series (Protocol Conversion Machine) provided by Century Systems Co., Ltd. If this vulnerability is exploited, a remote unauthenticated attacker may reboot the device by sending a specially crafted request.","status":"published","published":"2025-03-03T09:15:39.99Z","modified":"2026-06-17T09:00:36.427Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"medium","assessor":"secondary"}],"cwes":["CWE-120"],"updated_at":"2026-11-02T14:10:52.398004Z"}]}}