VULNERABILITY INTELLIGENCE
CVE-2025-30485
CVSS score6.2 MEDIUM
EPSS probability0.32%
CISA KEVNot currently listed
Published2025-04-03
Last modified2026-06-17
CVSS vectorCVSS:3.0/AV:P/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Description
UNIX symbolic link (Symlink) following issue exists in FutureNet NXR series, VXR series and WXR series routers. Attaching to the affected product an external storage containing malicious symbolic link files, a logged-in administrative user may obtain and/or destroy internal files.
Weakness classification
- CWE-61: UNIX Symbolic Link (Symlink) Following