CVE-2025-65002
Published Nov 12, 2025
·Updated
Fujitsu / Fsas Technologies iRMC S6 on M5 before 1.37S mishandles Redfish/WebUI access if the length of a username is exactly 16 characters.
Affected Software
1 affected component
Fujitsu iRMC S6<1.37S
Event History
Nov 12, 2025
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
DescriptionSeverityWeakness
Data Sourced
via NVD·06:15 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2025-65002?
CVE-2025-65002 is classified as a high-severity vulnerability due to its potential impact on unauthorized access.
2
How do I fix CVE-2025-65002?
To mitigate CVE-2025-65002, upgrade the Fujitsu iRMC S6 firmware to version 1.37S or later.
3
What systems are affected by CVE-2025-65002?
CVE-2025-65002 affects Fujitsu iRMC S6 versions prior to 1.37S.
4
What is the cause of CVE-2025-65002?
CVE-2025-65002 is caused by mishandling of Redfish/WebUI access for usernames that are exactly 16 characters long.
5
Is there a workaround for CVE-2025-65002?
While upgrading is the recommended fix for CVE-2025-65002, a possible workaround is to avoid using usernames that are 16 characters in length.