Description (CNA)
Authentication bypass vulnerability exists in FutureNet AS series (Industrial Routers) provided by Century Systems Co., Ltd. If this vulnerability is exploited, a remote unauthenticated attacker may obtain the device information such as MAC address by sending a specially crafted request.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Century Systems Co., Ltd. / FutureNet AS-250/S | affected firmware Version 1.14.0 and earlier |
| Century Systems Co., Ltd. / FutureNet AS-250/F-SC | affected firmware Version 1.14.0 and earlier |
| Century Systems Co., Ltd. / FutureNet AS-250/F-KO | affected firmware Version 1.14.0 and earlier |
| Century Systems Co., Ltd. / FutureNet AS-250/NL | affected firmware Version 1.14.0 and earlier |
| Century Systems Co., Ltd. / FutureNet AS-250/KL | affected firmware Version 1.14.0 and earlier |
| Century Systems Co., Ltd. / FutureNet AS-250/KL Rev2 | affected firmware Version 2.6.4 and earlier |
| Century Systems Co., Ltd. / FutureNet AS-250/L | affected firmware Version 2.6.4 and earlier |
| Century Systems Co., Ltd. / FutureNet AS-M250/L | affected firmware Version 2.6.4 and earlier |
| Century Systems Co., Ltd. / FutureNet AS-M250/KL | affected firmware Version 2.6.4 and earlier |
| Century Systems Co., Ltd. / FutureNet AS-M250/NL | affected firmware Version 2.6.4 and earlier |
| Century Systems Co., Ltd. / FutureNet AS-P250/NL | affected firmware Version 2.6.4 and earlier |
| Century Systems Co., Ltd. / FutureNet AS-P250/KL | affected firmware Version 2.6.4 and earlier |
| Century Systems Co., Ltd. / FutureNet AS-210/U4 | affected firmware Version 2.6.4 and earlier |
CWE
CWE-288
References
- https://www.centurysys.co.jp/backnumber/common/jvnvu96398949.html
- https://jvn.jp/en/vu/JVNVU96398949/
ADP enrichment
No English description supplied.
No references supplied.