CVE Catalog

CVE-2025-57563

MediumCVSS 6.5
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Low risk
0.43%

37th percentile - higher than 37% of all known CVEs

Summary

A path traversal in StarNet Communications Corporation FastX v.4 through v4.1.51 allows unauthenticated attackers to read arbitrary files. An attacker can manipulate paths to access files outside the intended directory.

Risk Assessment

An unauthenticated attacker can read sensitive files from the system, potentially leading to data leakage and further attacks. This may compromise the confidentiality of information stored on the server.

Recommendation

Update FastX to a version later than v4.1.51 containing the fix. Restrict network access to the FastX service and validate file paths on the server side.

Other vulnerabilities in FastX

Original NVD description (English source)

A path traversal in StarNet Communications Corporation FastX v.4 through v4.1.51 allows unauthenticated attackers to read arbitrary files.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS