CVE-2025-65002

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2025-65002
Fujitsu / Fsas Technologies iRMC S6 on M5 before 1.37S mishandles Redfish/WebUI access if the length of a username is exactly 16 characters.

7.5 /10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 1.6 / Impact : 5.9

Attack Vector NETWORK

Attack Complexity HIGH

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://security.ts.fujitsu.com/ProductSecurity/content/FsasTech-PSIRT-FTI-ISS-2025-082610-Security-Notice.pdf
Configurations

No configuration.

History

14 Nov 2025, 14:15

Type Values Removed Values Added
Summary (en) Fujitsu iRMC S6 on M5 before 1.37S mishandles Redfish/WebUI access if the length of a username is exactly 16 characters. (en) Fujitsu / Fsas Technologies iRMC S6 on M5 before 1.37S mishandles Redfish/WebUI access if the length of a username is exactly 16 characters.

12 Nov 2025, 18:15

Type Values Removed Values Added
New CVE
Information

Published : 2025-11-12 18:15

Updated : 2025-11-14 16:42

NVD link : CVE-2025-65002

Mitre link : CVE-2025-65002

CVE.ORG link : CVE-2025-65002

JSON object : View

Products Affected

No product.

CWE
CWE-863

Incorrect Authorization