CVE-2025-57563
MediumCVSS 6.5Exploitation Probability (EPSS)
Low risk37th percentile - higher than 37% of all known CVEs
Summary
A path traversal in StarNet Communications Corporation FastX v.4 through v4.1.51 allows unauthenticated attackers to read arbitrary files. An attacker can manipulate paths to access files outside the intended directory.
Risk Assessment
An unauthenticated attacker can read sensitive files from the system, potentially leading to data leakage and further attacks. This may compromise the confidentiality of information stored on the server.
Recommendation
Update FastX to a version later than v4.1.51 containing the fix. Restrict network access to the FastX service and validate file paths on the server side.
Other vulnerabilities in FastX
Original NVD description (English source)
A path traversal in StarNet Communications Corporation FastX v.4 through v4.1.51 allows unauthenticated attackers to read arbitrary files.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS

