CVE-2025-25613

FS Inc S3150-8T2F 8-Port Gigabit Ethernet L2+ Switch, 8 x Gigabit RJ45, with 2 x 1Gb SFP, Fanless. All versions before 2.2.0D Build 135103 were discovered to transmit cookies for their web based administrative application containing usernames and passwords. These were transmitted in cleartext using simple base64 encoding during every POST request made to the server.

• CWE-312

• https://github.com/SwiftSecur/S3150-8T2F-FS.com-Research/wikiExploit, Third Party Advisory

Published

Nov 20, 2025

Last Modified

Jul 5, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-25604Totolink X5000R V9.1.0u.6369_B20230113 is vulnerable to comm…6.5
• CVE-2025-25605Totolink X5000R V9.1.0u.6369_B20230113 is vulnerable to comm…6.5
• CVE-2025-25609TOTOlink A3002R V1.1.1-B20200824.0128 contains a buffer over…8
• CVE-2025-2561The Ninja Forms WordPress plugin before 3.10.1 does not san…4.8
• CVE-2025-25610TOTOlink A3002R V1.1.1-B20200824.0128 contains a buffer over…8
• CVE-2025-25612FS Inc S3150-8T2F prior to version S3150-8T2F_2.2.0D_135103 …7.1
• CVE-2025-25614Incorrect Access Control in Unifiedtransform 2.0 leads to Pr…8.8
• CVE-2025-25615Unifiedtransform 2.0 is vulnerable to Incorrect Access Contr…2.7
• CVE-2025-25616Unifiedtransform 2.0 is vulnerable to Incorrect Access Contr…4.3
• CVE-2025-25617Incorrect Access Control in Unifiedtransform 2.X leads to Pr…4.3
• CVE-2025-25618Incorrect Access Control in Unifiedtransform 2.0 leads to Pr…3.3
• CVE-2025-2562Insufficient logging in the autotyping feature in Devolution…5.4