Description
Initialization of a resource with an insecure default vulnerability in FutureNet NXR series, VXR series and WXR series provided by Century Systems Co., Ltd. allows a remote unauthenticated attacker to access telnet service unlimitedly.
CVSS breakdown
CVSS 3.1
Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
None
Availability
High
Affected products
- Century Systems Co., Ltd. / FutureNet NXR-1200firmware version 5.25.21 and earlier – firmware version 5.25.21 and earlier
- Century Systems Co., Ltd. / FutureNet NXR-120/Cfirmware version 5.25.7H and earlier – firmware version 5.25.7H and earlier
- Century Systems Co., Ltd. / FutureNet NXR-125/CXfirmware version 5.25.7H and earlier – firmware version 5.25.7H and earlier
- Century Systems Co., Ltd. / FutureNet NXR-1300 seriesfirmware version 7.4.9 and earlier – firmware version 7.4.9 and earlier
- Century Systems Co., Ltd. / FutureNet NXR-130/Cfirmware version 5.13.21 and earlier – firmware version 5.13.21 and earlier
- Century Systems Co., Ltd. / FutureNet NXR-155/C seriesfirmware version 5.22.5M and earlier – firmware version 5.22.5M and earlier
- Century Systems Co., Ltd. / FutureNet NXR-160/LWfirmware version 21.8.3 and earlier – firmware version 21.8.3 and earlier
- Century Systems Co., Ltd. / FutureNet NXR-230/Cfirmware version 5.30.12 and earlier – firmware version 5.30.12 and earlier
- Century Systems Co., Ltd. / FutureNet NXR-350/Cfirmware version 5.30.9 and earlier – firmware version 5.30.9 and earlier
- Century Systems Co., Ltd. / FutureNet NXR-530firmware version 21.11.13 and earlier – firmware version 21.11.13 and earlier
- Century Systems Co., Ltd. / FutureNet NXR-610X seriesfirmware version 21.14.11 and earlier – firmware version 21.14.11 and earlier
- Century Systems Co., Ltd. / FutureNet NXR-650firmware version 21.16.1 and earlier – firmware version 21.16.1 and earlier
- Century Systems Co., Ltd. / FutureNet NXR-G050 seriesfirmware version 21.12.9 and earlier – firmware version 21.12.9 and earlier
- Century Systems Co., Ltd. / FutureNet NXR-G060 seriesfirmware version 21.15.5 and earlier – firmware version 21.15.5 and earlier
- Century Systems Co., Ltd. / FutureNet NXR-G100 seriesfirmware version 6.23.10 and earlier – firmware version 6.23.10 and earlier
- Century Systems Co., Ltd. / FutureNet NXR-G110 seriesfirmware version 21.7.30C and earlier – firmware version 21.7.30C and earlier
- Century Systems Co., Ltd. / FutureNet NXR-G120 seriesfirmware version 21.15.2 and earlier – firmware version 21.15.2 and earlier
- Century Systems Co., Ltd. / FutureNet NXR-G180/L-CAfirmware version 21.7.28B and earlier – firmware version 21.7.28B and earlier
- Century Systems Co., Ltd. / FutureNet NXR-G200 seriesfirmware version 9.12.15 and earlier – firmware version 9.12.15 and earlier
- Century Systems Co., Ltd. / FutureNet VXR-x64firmware version 21.7.31 and earlier – firmware version 21.7.31 and earlier
- Century Systems Co., Ltd. / FutureNet VXR-x86firmware version 10.1.4 and earlier – firmware version 10.1.4 and earlier
- Century Systems Co., Ltd. / FutureNet WXR-250firmware version 1.4.7 and earlier – firmware version 1.4.7 and earlier