Description
Authentication bypass vulnerability exists in FutureNet AS series (Industrial Routers) provided by Century Systems Co., Ltd. If this vulnerability is exploited, a remote unauthenticated attacker may obtain the device information such as MAC address by sending a specially crafted request.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Century Systems | FutureNet AS-250/S | firmware Version 1.14.0 and earlier | — |
| Century Systems | FutureNet AS-250/F-SC | firmware Version 1.14.0 and earlier | — |
| Century Systems | FutureNet AS-250/F-KO | firmware Version 1.14.0 and earlier | — |
| Century Systems | FutureNet AS-250/NL | firmware Version 1.14.0 and earlier | — |
| Century Systems | FutureNet AS-250/KL | firmware Version 1.14.0 and earlier | — |
| Century Systems | FutureNet AS-250/KL Rev2 | firmware Version 2.6.4 and earlier | — |
| Century Systems | FutureNet AS-250/L | firmware Version 2.6.4 and earlier | — |
| Century Systems | FutureNet AS-M250/L | firmware Version 2.6.4 and earlier | — |
| Century Systems | FutureNet AS-M250/KL | firmware Version 2.6.4 and earlier | — |
| Century Systems | FutureNet AS-M250/NL | firmware Version 2.6.4 and earlier | — |
| Century Systems | FutureNet AS-P250/NL | firmware Version 2.6.4 and earlier | — |
| Century Systems | FutureNet AS-P250/KL | firmware Version 2.6.4 and earlier | — |
| Century Systems | FutureNet AS-210/U4 | firmware Version 2.6.4 and earlier | — |