CVE-2024-31070: Century Systems Co., Ltd. FutureNet NXR-1300 series

Описание

Оригинално описание

Initialization of a resource with an insecure default vulnerability in FutureNet NXR series, VXR series and WXR series provided by Century Systems Co., Ltd. allows a remote unauthenticated attacker to access telnet service unlimitedly.

Засегнати продукти

• Century Systems Co., Ltd. FutureNet NXR-1300 series: firmware version 7.4.9 and earlier
• Century Systems Co., Ltd. FutureNet NXR-650: firmware version 21.16.1 and earlier
• Century Systems Co., Ltd. FutureNet NXR-610X series: firmware version 21.14.11 and earlier
• Century Systems Co., Ltd. FutureNet NXR-530: firmware version 21.11.13 and earlier
• Century Systems Co., Ltd. FutureNet NXR-350/C: firmware version 5.30.9 and earlier
• Century Systems Co., Ltd. FutureNet NXR-230/C: firmware version 5.30.12 and earlier
• Century Systems Co., Ltd. FutureNet NXR-160/LW: firmware version 21.8.3 and earlier
• Century Systems Co., Ltd. FutureNet NXR-G200 series: firmware version 9.12.15 and earlier
• Century Systems Co., Ltd. FutureNet NXR-G180/L-CA: firmware version 21.7.28B and earlier
• Century Systems Co., Ltd. FutureNet NXR-G120 series: firmware version 21.15.2 and earlier
• Century Systems Co., Ltd. FutureNet NXR-G110 series: firmware version 21.7.30C and earlier
• Century Systems Co., Ltd. FutureNet NXR-G100 series: firmware version 6.23.10 and earlier
• Century Systems Co., Ltd. FutureNet NXR-G060 series: firmware version 21.15.5 and earlier
• Century Systems Co., Ltd. FutureNet NXR-G050 series: firmware version 21.12.9 and earlier
• Century Systems Co., Ltd. FutureNet VXR/x64: firmware version 21.7.31 and earlier
• Century Systems Co., Ltd. FutureNet VXR/x86: firmware version 10.1.4 and earlier
• Century Systems Co., Ltd. FutureNet NXR-1200: firmware version 5.25.21 and earlier
• Century Systems Co., Ltd. FutureNet NXR-130/C: firmware version 5.13.21 and earlier
• Century Systems Co., Ltd. FutureNet NXR-155/C series: firmware version 5.22.5M and earlier
• Century Systems Co., Ltd. FutureNet NXR-125/CX: firmware version 5.25.7H and earlier
• Century Systems Co., Ltd. FutureNet NXR-120/C: firmware version 5.25.7H and earlier
• Century Systems Co., Ltd. FutureNet WXR-250: firmware version 1.4.7 and earlier
• centurysys: още 22 продукта, добавени от centurysys

  futurenet_nxr-1300_firmware, futurenet_nxr-650_firmware, futurenet_nxr-610x_firmware, futurenet_nxr-530_firmware, futurenet_nxr-350\/c_firmware, futurenet_nxr-230\/c_firmware, futurenet_nxr-160\/lw_firmware, futurenet_nxr-g200_firmware, futurenet_nxr-g180\/l-ca_firmware, futurenet_nxr-g120_firmware, futurenet_nxr-g110_firmware, futurenet_nxr-g100_firmware, futurenet_nxr-g060_firmware, futurenet_nxr-g050_firmware, futurenet_vxr\/x64_firmware, futurenet_vxr\/x86_firmware, futurenet_nxr-1200_firmware, futurenet_nxr-130\/c_firmware, futurenet_nxr-155\/c_firmware, futurenet_nxr-125\/cx_firmware, futurenet_nxr-120\/c_firmware, futurenet_wxr-250_firmware

Вид слабост

• CWE-1188 Initialization of a Resource with an Insecure Default

История

Други уязвимости в Century Systems Co., Ltd. FutureNet NXR-1300 series

• 6.2CVE-2025-30485
• 9.8CVE-2024-50357
• 9.8CVE-2024-36491
• 7.2CVE-2024-36475

Първоизточници

• https://www.cve.org/CVERecord?id=CVE-2024-31070
• https://nvd.nist.gov/vuln/detail/CVE-2024-31070
• https://www.centurysys.co.jp/backnumber/nxr_common/20240716-01.html
• https://www.centurysys.co.jp/backnumber/nxr_common/20240716-03.html
• https://jvn.jp/en/vu/JVNVU96424864/