Vulnerability · Published Mar 3, 2025 · Assigned by jpcert

CVE-2025-24846

High 7.5

In plain English

A high-severity authentication bypass in FutureNet AS-210/U4 from Century Systems Co., Ltd.. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.5% (higher than 45% of all known vulnerabilities).

Severity (CVSS 3.1)7.5High
Exploit odds (30 days)0.5%top 54.7% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known

Official description

Authentication bypass vulnerability exists in FutureNet AS series (Industrial Routers) provided by Century Systems Co., Ltd. If this vulnerability is exploited, a remote unauthenticated attacker may obtain the device information such as MAC address by sending a specially crafted request.

Affected products (as reported)

VendorProductVersions
Century Systems Co., Ltd. FutureNet AS-250/S firmware Version 1.14.0 and earlier
Century Systems Co., Ltd. FutureNet AS-250/F-SC firmware Version 1.14.0 and earlier
Century Systems Co., Ltd. FutureNet AS-250/F-KO firmware Version 1.14.0 and earlier
Century Systems Co., Ltd. FutureNet AS-250/NL firmware Version 1.14.0 and earlier
Century Systems Co., Ltd. FutureNet AS-250/KL firmware Version 1.14.0 and earlier
Century Systems Co., Ltd. FutureNet AS-250/KL Rev2 firmware Version 2.6.4 and earlier
Century Systems Co., Ltd. FutureNet AS-250/L firmware Version 2.6.4 and earlier
Century Systems Co., Ltd. FutureNet AS-M250/L firmware Version 2.6.4 and earlier
Century Systems Co., Ltd. FutureNet AS-M250/KL firmware Version 2.6.4 and earlier
Century Systems Co., Ltd. FutureNet AS-M250/NL firmware Version 2.6.4 and earlier
Century Systems Co., Ltd. FutureNet AS-P250/NL firmware Version 2.6.4 and earlier
Century Systems Co., Ltd. FutureNet AS-P250/KL firmware Version 2.6.4 and earlier
Century Systems Co., Ltd. FutureNet AS-210/U4 firmware Version 2.6.4 and earlier

Weakness: CWE-288 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

References