Insecure Default Vulnerability in Century Systems' Products Allows Unlimited Telnet Access
CVE-2024-31070
What is CVE-2024-31070?
The vulnerability involves the initialization of resources with an insecure default in the FutureNet NXR, VXR, and WXR series products developed by Century Systems Co., Ltd. This oversight allows remote unauthenticated attackers to gain unlimited access to the telnet service. The potential exploitation of this vulnerability poses significant security risks, facilitating unauthorized control and manipulation of the affected devices.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.
Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.
Affected Version(s)
FutureNet NXR-120/C firmware version 5.25.7H and earlier
FutureNet NXR-1200 firmware version 5.25.21 and earlier
FutureNet NXR-125/CX firmware version 5.25.7H and earlier
References
CVSS V3.1
Timeline
Vulnerability published
Vulnerability Reserved
