CVSS 3.1
9.1 criticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:HCVE-2024-31070
Critical (9.1) in centurysys. EPSS 0.8% chance of exploitation in the next 30 days.
Initialization of a resource with an insecure default vulnerability in FutureNet NXR series, VXR series and WXR series provided by Century Systems Co., Ltd. allows a remote unauthenticated attacker to access telnet service unlimitedly.
Severity
- EPSS
- 0.8% chance of exploitation in the next 30 days; higher than 54% of CVEs (scores of 2026-10-31)
- CWE
- CWE-1188
- Published
- Modified
- Record from
- the NVD, synced
Affected
- centurysys:futurenet_nxr-1200_firmware
- centurysys:futurenet_nxr-120\/c_firmware
- centurysys:futurenet_nxr-125\/cx_firmware
- centurysys:futurenet_nxr-1300_firmware
- centurysys:futurenet_nxr-130\/c_firmware
- centurysys:futurenet_nxr-155\/c_firmware
- centurysys:futurenet_nxr-160\/lw_firmware
- centurysys:futurenet_nxr-230\/c_firmware
- centurysys:futurenet_nxr-350\/c_firmware
- centurysys:futurenet_nxr-530_firmware
- centurysys:futurenet_nxr-610x_firmware
- centurysys:futurenet_nxr-650_firmware
- centurysys:futurenet_nxr-g050_firmware
- centurysys:futurenet_nxr-g060_firmware
- centurysys:futurenet_nxr-g100_firmware
- centurysys:futurenet_nxr-g110_firmware
- centurysys:futurenet_nxr-g120_firmware
- centurysys:futurenet_nxr-g180\/l-ca_firmware
- centurysys:futurenet_nxr-g200_firmware
- centurysys:futurenet_vxr-x64
- centurysys:futurenet_vxr-x86
- centurysys:futurenet_wxr-250_firmware