Description (CNA)
Buffer overflow vulnerability exists in FutureNet AS series (Industrial Routers) and FA series (Protocol Conversion Machine) provided by Century Systems Co., Ltd. If this vulnerability is exploited, a remote unauthenticated attacker may reboot the device by sending a specially crafted request.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Century Systems Co., Ltd. / FutureNet AS-250/S | affected firmware Version 1.14.0 and earlier |
| Century Systems Co., Ltd. / FutureNet AS-250/F-SC | affected firmware Version 1.14.0 and earlier |
| Century Systems Co., Ltd. / FutureNet AS-250/F-KO | affected firmware Version 1.14.0 and earlier |
| Century Systems Co., Ltd. / FutureNet AS-250/NL | affected firmware Version 1.14.0 and earlier |
| Century Systems Co., Ltd. / FutureNet AS-250/KL | affected firmware Version 1.14.0 and earlier |
| Century Systems Co., Ltd. / FutureNet AS-250/KL Rev2 | affected firmware Version 2.6.6 and earlier |
| Century Systems Co., Ltd. / FutureNet AS-250/L | affected firmware Version 2.6.6 and earlier |
| Century Systems Co., Ltd. / FutureNet AS-M250/L | affected firmware Version 3.0.0 and earlier |
| Century Systems Co., Ltd. / FutureNet AS-M250/KL | affected firmware Version 3.0.0 and earlier |
| Century Systems Co., Ltd. / FutureNet AS-M250/NL | affected firmware Version 3.0.0 and earlier |
| Century Systems Co., Ltd. / FutureNet AS-P250/NL | affected firmware Version 2.6.6 and earlier |
| Century Systems Co., Ltd. / FutureNet AS-P250/KL | affected firmware Version 2.6.6 and earlier |
| Century Systems Co., Ltd. / FutureNet AS-210/U4 | affected firmware Version 2.6.6 and earlier |
| Century Systems Co., Ltd. / FutureNet FA-210 | affected firmware Version 1.1.9 and earlier |
| Century Systems Co., Ltd. / FutureNet FA-215 | affected firmware Version 1.0.1 and earlier |
CWE
CWE-120
References
- https://www.centurysys.co.jp/backnumber/common/jvnvu96398949.html
- https://jvn.jp/en/vu/JVNVU96398949/
ADP enrichment
No English description supplied.
No references supplied.