CVE-2025-65002 - Fujitsu / Fsas Technologies iRMC S6 on M5 before 1.37S mishandles Redfish/WebUI access if the length of a username is exactly 16 characters

Back Back to CVE browser

HIGH

Fujitsu / Fsas Technologies iRMC S6 on M5 before 1.37S mishandles Redfish/WebUI access if the length of a username is exactly 16 characters

Published Nov 12, 2025

7.5

HIGH

CVSS 3.1

EPSS 0.27%

Description

Fujitsu / Fsas Technologies iRMC S6 on M5 before 1.37S mishandles Redfish/WebUI access if the length of a username is exactly 16 characters.

Affected products

Vendor Fujitsu / Fsas Technologies Product iRMC Default
unaffected
- Version
  S6 on M5
  Status
  affected
  Constraints
  <1.37S

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Fujitsu / Fsas Technologies

iRMC

unaffected

Version	Status	Constraints
S6 on M5	affected	<1.37S

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-863

Incorrect Authorization

References (2)

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2025-131958		Advisory
https://security.ts.fujitsu.com/ProductSecurity/content/FsasTech-PSIRT-FTI-ISS-2025-082610-Security-Notice.pdf

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Nov 12, 2025

Updated Nov 18, 2025

Reserved Nov 12, 2025

Link CVE-2025-65002

CISA Vulnrichment

Updated Nov 13, 2025

NVD

Status Deferred

Modified Jun 17, 2026

Link CVE-2025-65002

Red Hat

Severity n/a

Public date n/a

Links CVE-2025-65002

ENISA EUVD

Assigner mitre

Published Nov 12, 2025

Updated Nov 18, 2025

Exploited since n/a

Link EUVD-2025-131958

EUVD-2025-131958