Log in Start free

Vulnerability · Published Jul 17, 2024 · Assigned by jpcert

CVE-2024-31070

Critical 9.1

In plain English

A critical-severity security flaw in FutureNet NXR-1200 from Century Systems Co., Ltd.. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.8% (higher than 55% of all known vulnerabilities).

Severity (CVSS 3.1)9.1Critical
Exploit odds (30 days)0.8%top 44.9% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known

Official description

Initialization of a resource with an insecure default vulnerability in FutureNet NXR series, VXR series and WXR series provided by Century Systems Co., Ltd. allows a remote unauthenticated attacker to access telnet service unlimitedly.

Affected products (as reported)

VendorProductVersions
Century Systems Co., Ltd. FutureNet NXR-1300 series firmware version 7.4.9 and earlier
Century Systems Co., Ltd. FutureNet NXR-650 firmware version 21.16.1 and earlier
Century Systems Co., Ltd. FutureNet NXR-610X series firmware version 21.14.11 and earlier
Century Systems Co., Ltd. FutureNet NXR-530 firmware version 21.11.13 and earlier
Century Systems Co., Ltd. FutureNet NXR-350/C firmware version 5.30.9 and earlier
Century Systems Co., Ltd. FutureNet NXR-230/C firmware version 5.30.12 and earlier
Century Systems Co., Ltd. FutureNet NXR-160/LW firmware version 21.8.3 and earlier
Century Systems Co., Ltd. FutureNet NXR-G200 series firmware version 9.12.15 and earlier
Century Systems Co., Ltd. FutureNet NXR-G180/L-CA firmware version 21.7.28B and earlier
Century Systems Co., Ltd. FutureNet NXR-G120 series firmware version 21.15.2 and earlier
Century Systems Co., Ltd. FutureNet NXR-G110 series firmware version 21.7.30C and earlier
Century Systems Co., Ltd. FutureNet NXR-G100 series firmware version 6.23.10 and earlier
Century Systems Co., Ltd. FutureNet NXR-G060 series firmware version 21.15.5 and earlier
Century Systems Co., Ltd. FutureNet NXR-G050 series firmware version 21.12.9 and earlier
Century Systems Co., Ltd. FutureNet VXR/x64 firmware version 21.7.31 and earlier
Century Systems Co., Ltd. FutureNet VXR/x86 firmware version 10.1.4 and earlier
Century Systems Co., Ltd. FutureNet NXR-1200 firmware version 5.25.21 and earlier
Century Systems Co., Ltd. FutureNet NXR-130/C firmware version 5.13.21 and earlier
Century Systems Co., Ltd. FutureNet NXR-155/C series firmware version 5.22.5M and earlier
Century Systems Co., Ltd. FutureNet NXR-125/CX firmware version 5.25.7H and earlier
Century Systems Co., Ltd. FutureNet NXR-120/C firmware version 5.25.7H and earlier
Century Systems Co., Ltd. FutureNet WXR-250 firmware version 1.4.7 and earlier

Weakness: CWE-1188 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H

References