{"id":"CVE-2025-58152","aliases":["EUVD-2025-37302","GHSA-mg9h-26fx-x4qq"],"status":"published","title":"FutureNet MA and IP-K series provided by Century Systems Co., Ltd. put the firmware version and...","description":"FutureNet MA and IP-K series provided by Century Systems Co., Ltd. put the firmware version and the garbage collection information on the internal web page. With some crafted HTTP request, they can be accessed without authentication.","severity":{"version":"4.0","score":6.9,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-11","score":0.00315,"percentile":0.24722,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-552"],"published":"2025-10-31T05:55:02Z","modified":"2026-10-18T21:10:00Z","products":[{"vendor":"century systems co., ltd.","product":"futurenet ip-k series"},{"vendor":"century systems co., ltd.","product":"futurenet ma-e300 series"},{"vendor":"century systems co., ltd.","product":"futurenet ma-p series"},{"vendor":"century systems co., ltd.","product":"futurenet ma-s series"},{"vendor":"century systems co., ltd.","product":"futurenet ma-x series"}],"references":[{"url":"https://www.centurysys.co.jp/backnumber/common/jvnvu98191201.html"},{"url":"https://jvn.jp/en/vu/JVNVU98191201/"},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-58152"},{"url":"https://jvn.jp/en/vu/JVNVU98191201"},{"url":"https://github.com/advisories/GHSA-mg9h-26fx-x4qq"}],"sources":{"cve":[{"id":"CVE-2025-58152","description":"FutureNet MA and IP-K series provided by Century Systems Co., Ltd. put the firmware version and the garbage collection information on the internal web page. With some crafted HTTP request, they can be accessed without authentication.","status":"published","published":"2025-10-31T05:55:02.996Z","modified":"2025-10-31T17:07:56.496Z","cvss":[{"version":"4.0","score":6.9,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N","level":"medium","assessor":"cna"},{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","level":"medium","assessor":"cna"}],"cwes":["CWE-552"],"updated_at":"2026-11-02T14:32:37.351404Z"}],"euvd":[{"id":"EUVD-2025-37302","description":"FutureNet MA and IP-K series provided by Century Systems Co., Ltd. put the firmware version and the garbage collection information on the internal web page. With some crafted HTTP request, they can be accessed without authentication.","status":"published","published":"2025-10-31T05:55:02Z","modified":"2025-10-31T17:07:56Z","cvss":[{"version":"4.0","score":6.9,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N","level":"medium"}],"updated_at":"2026-11-02T19:49:35.368666Z"}],"ghsa":[{"id":"GHSA-mg9h-26fx-x4qq","title":"FutureNet MA and IP-K series provided by Century Systems Co., Ltd. put the firmware version and...","description":"FutureNet MA and IP-K series provided by Century Systems Co., Ltd. put the firmware version and the garbage collection information on the internal web page. With some crafted HTTP request, they can be accessed without authentication.","status":"published","published":"2025-10-31T06:33:21Z","modified":"2025-10-31T06:33:28Z","cvss":[{"version":"4.0","score":6.9,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","level":"medium"},{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","level":"medium"}],"cwes":["CWE-552"],"updated_at":"2026-11-02T15:04:15.956958Z"}],"nvd":[{"id":"CVE-2025-58152","description":"FutureNet MA and IP-K series provided by Century Systems Co., Ltd. put the firmware version and the garbage collection information on the internal web page. With some crafted HTTP request, they can be accessed without authentication.","status":"published","published":"2025-10-31T06:15:34.15Z","modified":"2026-10-18T21:10:00.12Z","cvss":[{"version":"4.0","score":6.9,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","level":"medium","assessor":"secondary"},{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","level":"medium","assessor":"secondary"}],"cwes":["CWE-552"],"updated_at":"2026-11-02T14:11:41.607433Z"}]}}