Files or Directories Accessible to External Parties in Century Systems products - CVE-2025-58152
Published: October 31, 2025
Vulnerability identifier: #VU117870
CSH Severity: Low
CVSS v4: 6.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N]
CVE-ID: CVE-2025-58152
CWE-ID: CWE-552
Exploitation vector: Remote access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a remote attacker to compromise the target system.
The vulnerability exists due to the files or directories accessible to external parties. A remote attacker can gain access to firmware version and the garbage collection information on the system.
Affected software
FutureNet MA-X
FutureNet MA-E300
FutureNet MA-S
FutureNet MA-P
FutureNet IP-K
FutureNet MA-E300
FutureNet MA-S
FutureNet MA-P
FutureNet IP-K
How to mitigate CVE-2025-58152
Install updates from vendor's website.
FutureNet MA-X - update to 6.4.2
FutureNet MA-E300 - update to 6.2.2
FutureNet MA-S - update to 6.5.0
FutureNet MA-P - update to 6.5.0
FutureNet IP-K - update to 2.2.2
FutureNet MA-E300 - update to 6.2.2
FutureNet MA-S - update to 6.5.0
FutureNet MA-P - update to 6.5.0
FutureNet IP-K - update to 2.2.2