Skip to content
OpenAdvisories

Description

Initialization of a resource with an insecure default vulnerability in FutureNet NXR series, VXR series and WXR series provided by Century Systems Co., Ltd. allows a remote unauthenticated attacker to access telnet service unlimitedly.

Affected products

VendorProductAffectedFixed
Century Systems FutureNet NXR-1300 series firmware version 7.4.9 and earlier —
Century Systems FutureNet NXR-650 firmware version 21.16.1 and earlier —
Century Systems FutureNet NXR-610X series firmware version 21.14.11 and earlier —
Century Systems FutureNet NXR-530 firmware version 21.11.13 and earlier —
Century Systems FutureNet NXR-350/C firmware version 5.30.9 and earlier —
Century Systems FutureNet NXR-230/C firmware version 5.30.12 and earlier —
Century Systems FutureNet NXR-160/LW firmware version 21.8.3 and earlier —
Century Systems FutureNet NXR-G200 series firmware version 9.12.15 and earlier —
Century Systems FutureNet NXR-G180/L-CA firmware version 21.7.28B and earlier —
Century Systems FutureNet NXR-G120 series firmware version 21.15.2 and earlier —
Century Systems FutureNet NXR-G110 series firmware version 21.7.30C and earlier —
Century Systems FutureNet NXR-G100 series firmware version 6.23.10 and earlier —
Century Systems FutureNet NXR-G060 series firmware version 21.15.5 and earlier —
Century Systems FutureNet NXR-G050 series firmware version 21.12.9 and earlier —
Century Systems FutureNet VXR/x64 firmware version 21.7.31 and earlier —
Century Systems FutureNet VXR/x86 firmware version 10.1.4 and earlier —
Century Systems FutureNet NXR-1200 firmware version 5.25.21 and earlier —
Century Systems FutureNet NXR-130/C firmware version 5.13.21 and earlier —
Century Systems FutureNet NXR-155/C series firmware version 5.22.5M and earlier —
Century Systems FutureNet NXR-125/CX firmware version 5.25.7H and earlier —
Century Systems FutureNet NXR-120/C firmware version 5.25.7H and earlier —
Century Systems FutureNet WXR-250 firmware version 1.4.7 and earlier —

References