Authentication Bypass in FutureNet AS Series Industrial Routers by Century Systems Co., Ltd.
CVE-2025-24846

7.5HIGH

Key Information:

Vendor

Century Systems Co., Ltd.

Status
Futurenet As-250/s
Futurenet As-250/f-sc
Futurenet As-250/f-ko
Futurenet As-250/nl
Vendor
CVE Published:
3 March 2025

What is CVE-2025-24846?

An authentication bypass vulnerability exists in the FutureNet AS Series industrial routers manufactured by Century Systems Co., Ltd. This security flaw could empower a remote, unauthenticated attacker to gain access to sensitive device information, such as the MAC address, by sending carefully crafted requests. It highlights the importance of securing industrial devices and implementing strong authentication measures to prevent unauthorized access.

Affected Version(s)

FutureNet AS-210/U4 firmware Version 2.6.4 and earlier

FutureNet AS-250/F-KO firmware Version 1.14.0 and earlier

FutureNet AS-250/F-SC firmware Version 1.14.0 and earlier

References

https://www.centurysys.co.jp/backnumber/common/jvnvu96398...
https://jvn.jp/en/vu/JVNVU96398949/

CVSS V3.1

Score:
7.5
Severity:
HIGH
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.