Description
Authentication bypass vulnerability exists in FutureNet AS series (Industrial Routers) provided by Century Systems Co., Ltd. If this vulnerability is exploited, a remote unauthenticated attacker may obtain the device information such as MAC address by sending a specially crafted request.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Century Systems Co., Ltd. FutureNet AS-250/S
firmware Version 1.14.0 and earlieraffected
Century Systems Co., Ltd. FutureNet AS-250/F-SC
firmware Version 1.14.0 and earlieraffected
Century Systems Co., Ltd. FutureNet AS-250/F-KO
firmware Version 1.14.0 and earlieraffected
Century Systems Co., Ltd. FutureNet AS-250/NL
firmware Version 1.14.0 and earlieraffected
Century Systems Co., Ltd. FutureNet AS-250/KL
firmware Version 1.14.0 and earlieraffected
Century Systems Co., Ltd. FutureNet AS-250/KL Rev2
firmware Version 2.6.4 and earlieraffected
Century Systems Co., Ltd. FutureNet AS-250/L
firmware Version 2.6.4 and earlieraffected
Century Systems Co., Ltd. FutureNet AS-M250/L
firmware Version 2.6.4 and earlieraffected
Century Systems Co., Ltd. FutureNet AS-M250/KL
firmware Version 2.6.4 and earlieraffected
Century Systems Co., Ltd. FutureNet AS-M250/NL
firmware Version 2.6.4 and earlieraffected
Century Systems Co., Ltd. FutureNet AS-P250/NL
firmware Version 2.6.4 and earlieraffected
Century Systems Co., Ltd. FutureNet AS-P250/KL
firmware Version 2.6.4 and earlieraffected
Century Systems Co., Ltd. FutureNet AS-210/U4
firmware Version 2.6.4 and earlieraffected