CVE-2025-62497

Medium · 6.5

CVSS

6.5

EPSS

0.1%

Published

Nov 25, 2025

CISA due date

—

The record

Cross-site request forgery vulnerability exists in SNC-CX600W versions prior to Ver.2.8.0. If a user accesses a specially crafted webpage while logged in, unintended operations may be performed.

Affected packages

Ecosystem	Package	Introduced	Fixed