NetSight
IP …
critical9.1

CVE-2024-31070

Initialization of a resource with an insecure default vulnerability in FutureNet NXR series, VXR series and WXR series provided by Century Systems Co., Ltd.

Impact

Initialization of a resource with an insecure default vulnerability in FutureNet NXR series, VXR series and WXR series provided by Century Systems Co., Ltd. allows a remote unauthenticated attacker to access telnet service unlimitedly.

Affected products

VendorProductAffected versions
CenturysysFuturenet Nxr-1300 Firmware
before 7.4.10
CenturysysFuturenet Nxr-155\/C Firmware
All versions
CenturysysFuturenet Nxr-610x Firmware
before 21.14.11c
CenturysysFuturenet Nxr-G050 Firmware
before 21.12.10
CenturysysFuturenet Nxr-G060 Firmware
before 21.15.6
CenturysysFuturenet Nxr-G100 Firmware
before 6.23.11
CenturysysFuturenet Nxr-G110 Firmware
before 21.7.32
CenturysysFuturenet Nxr-G120 Firmware
before 21.15.2c
CenturysysFuturenet Nxr-G200 Firmware
before 9.12.16
CenturysysFuturenet Vxr-X64
before 21.7.32
CenturysysFuturenet Vxr-X86
before 10.1.5
CenturysysFuturenet Nxr-160\/Lw Firmware
before 21.8.4

Weakness classification

CWE-1188

References