CVE-2024-31070 - CVE House
Back to Database
Status published Unknown CVE-2024-31070

Initialization of a resource with an insecure default vulnerability in...

Vulnerability Description

Initialization of a resource with an insecure default vulnerability in FutureNet NXR series, VXR series and WXR series provided by Century Systems Co., Ltd. allows a remote unauthenticated attacker to access telnet service unlimitedly.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2024-31070

Credits & Attribution

No credits recorded in the NVD database.

Affected Vendor

Century Systems Co., Ltd.

View all reports →

Affected Software

FutureNet NXR-1300 series, FutureNet NXR-650, FutureNet NXR-610X series, FutureNet NXR-530, FutureNet NXR-350/C, FutureNet NXR-230/C, FutureNet NXR-160/LW, FutureNet NXR-G200 series, FutureNet NXR-G180/L-CA, FutureNet NXR-G120 series, FutureNet NXR-G110 series, FutureNet NXR-G100 series, FutureNet NXR-G060 series, FutureNet NXR-G050 series, FutureNet VXR/x64, FutureNet VXR/x86, FutureNet NXR-1200, FutureNet NXR-130/C, FutureNet NXR-155/C series, FutureNet NXR-125/CX, FutureNet NXR-120/C, FutureNet WXR-250
Vulnerable Versions:
firmware version 7.4.9 and earlier, firmware version 21.16.1 and earlier, firmware version 21.14.11 and earlier, firmware version 21.11.13 and earlier, firmware version 5.30.9 and earlier, firmware version 5.30.12 and earlier, firmware version 21.8.3 and earlier, firmware version 9.12.15 and earlier, firmware version 21.7.28B and earlier, firmware version 21.15.2 and earlier, firmware version 21.7.30C and earlier, firmware version 6.23.10 and earlier, firmware version 21.15.5 and earlier, firmware version 21.12.9 and earlier, firmware version 21.7.31 and earlier, firmware version 10.1.4 and earlier, firmware version 5.25.21 and earlier, firmware version 5.13.21 and earlier, firmware version 5.22.5M and earlier, firmware version 5.25.7H and earlier, firmware version 1.4.7 and earlier

Timeline

Official Publish: July 17th, 2024
Last Modified: August 2nd, 2024
Added to House: July 22nd, 2026

CVSS Vectors

No vector data available

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.