The following table lists the changes that have been made to the
CVE-2025-30485 vulnerability over time.
Vulnerability history details can be useful for understanding the evolution
of a vulnerability, and for identifying the most recent changes that may
impact the vulnerability’s severity, exploitability, or other characteristics.
-
New CVE Received
by [email protected]Apr. 03, 2025
Action Type Old Value New Value Added Description UNIX symbolic link (Symlink) following issue exists in FutureNet NXR series, VXR series and WXR series routers. Attaching to the affected product an external storage containing malicious symbolic link files, a logged-in administrative user may obtain and/or destroy internal files. Added CVSS V3 AV:P/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H Added CWE CWE-61 Added Reference https://jvn.jp/en/vu/JVNVU92821536/ Added Reference https://www.centurysys.co.jp/backnumber/common/jvnvu92821536.html