Multiple vulnerabilities in Century Systems FutureNet NXR series, VXR series and WXR series

Published: 2024-07-22

Risk	High
Patch available	YES
Number of vulnerabilities	4
CVE-ID	CVE-2024-31070 CVE-2024-36475 CVE-2024-36491 CVE-2020-10188
CWE-ID	CWE-1188 CWE-489 CWE-78 CWE-119
Exploitation vector	Network
Public exploit	N/A
Vulnerable software Subscribe	FutureNet WXR-250 Hardware solutions / Routers & switches, VoIP, GSM, etc FutureNet NXR-120/C Hardware solutions / Routers & switches, VoIP, GSM, etc FutureNet NXR-125/CX Hardware solutions / Routers & switches, VoIP, GSM, etc FutureNet NXR-155/C Hardware solutions / Routers & switches, VoIP, GSM, etc FutureNet NXR-130/C Hardware solutions / Routers & switches, VoIP, GSM, etc FutureNet NXR-1200 Hardware solutions / Routers & switches, VoIP, GSM, etc FutureNet VXR/x86 Hardware solutions / Routers & switches, VoIP, GSM, etc FutureNet VXR/x64 Hardware solutions / Routers & switches, VoIP, GSM, etc FutureNet NXR-G050 Hardware solutions / Routers & switches, VoIP, GSM, etc FutureNet NXR-G060 Hardware solutions / Routers & switches, VoIP, GSM, etc FutureNet NXR-G100 Hardware solutions / Routers & switches, VoIP, GSM, etc FutureNet NXR-G110 Hardware solutions / Routers & switches, VoIP, GSM, etc FutureNet NXR-G120 Hardware solutions / Routers & switches, VoIP, GSM, etc FutureNet NXR-G180/L-CA Hardware solutions / Routers & switches, VoIP, GSM, etc FutureNet NXR-G200 Hardware solutions / Routers & switches, VoIP, GSM, etc FutureNet NXR-160/LW Hardware solutions / Routers & switches, VoIP, GSM, etc FutureNet NXR-230/C Hardware solutions / Routers & switches, VoIP, GSM, etc FutureNet NXR-350/C Hardware solutions / Routers & switches, VoIP, GSM, etc FutureNet NXR-530 Hardware solutions / Routers & switches, VoIP, GSM, etc FutureNet NXR-610X Hardware solutions / Routers & switches, VoIP, GSM, etc FutureNet NXR-650 Hardware solutions / Routers & switches, VoIP, GSM, etc FutureNet NXR-1300 Hardware solutions / Routers & switches, VoIP, GSM, etc
Vendor	Century Systems

Security Bulletin

This security bulletin contains information about 4 vulnerabilities.

1) Insecure Default Initialization of Resource

EUVDB-ID: #VU94610

Risk: High

CVSSv3.1: 8.5 [CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C]

CVE-ID: CVE-2024-31070

CWE-ID: CWE-1188 - Insecure Default Initialization of Resource

Exploit availability: No

Description

The vulnerability allows a remote attacker to compromise the target system.

The vulnerability exists due to insecure default initialization of resource. A remote attacker can access telnet service unlimitedly.

Mitigation

Install update from vendor's website.

Vulnerable software versions

FutureNet WXR-250: 1.4.7

FutureNet NXR-120/C: 5.25.7H

FutureNet NXR-125/CX: 5.25.7H

FutureNet NXR-155/C: 5.22.5M

FutureNet NXR-130/C: 5.13.21

FutureNet NXR-1200: 5.25.21

FutureNet VXR/x86: 10.1.4

FutureNet VXR/x64: 21.7.31

FutureNet NXR-G050: 21.12.9

FutureNet NXR-G060: 21.15.5

FutureNet NXR-G100: 6.23.10

FutureNet NXR-G110: 21.7.30C

FutureNet NXR-G120: 21.15.2

FutureNet NXR-G180/L-CA: 21.7.28B

FutureNet NXR-G200: 9.12.15

FutureNet NXR-160/LW: 21.8.3

FutureNet NXR-230/C: 5.30.12

FutureNet NXR-350/C: 5.30.9

FutureNet NXR-530: 21.11.13

FutureNet NXR-610X: 21.14.11

FutureNet NXR-650: 21.16.1

FutureNet NXR-1300: 7.4.9

CPE2.3

External links

http://jvn.jp/en/vu/JVNVU96424864/index.html
http://www.centurysys.co.jp/backnumber/nxr_common/20240716-01.html

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.

How the attacker can exploit this vulnerability?

The attacker would have to send a specially crafted request to the affected device in order to exploit this vulnerability.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

2) Active Debug Code

EUVDB-ID: #VU94611

Risk: Low

CVSSv3.1: 6.3 [CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C]

CVE-ID: CVE-2024-36475

CWE-ID: CWE-489 - Active Debug Code

Exploit availability: No

Description

The vulnerability allows a remote user to compromise the target system.

The vulnerability exists due to the active debug code issue. A remote administrator can execute arbitrary OS commands on the target system.

Mitigation

Install update from vendor's website.

Vulnerable software versions

FutureNet WXR-250: 1.4.7

FutureNet NXR-120/C: 5.25.7H

FutureNet NXR-125/CX: 5.25.7H

FutureNet NXR-155/C: 5.22.5M

FutureNet NXR-130/C: 5.13.21

FutureNet NXR-1200: 5.25.21

FutureNet VXR/x86: 10.1.4

FutureNet VXR/x64: 21.7.31

FutureNet NXR-G050: 21.12.9

FutureNet NXR-G060: 21.15.5

FutureNet NXR-G100: 6.23.10

FutureNet NXR-G110: 21.7.30C

FutureNet NXR-G120: 21.15.2

FutureNet NXR-G180/L-CA: 21.7.28B

FutureNet NXR-G200: 9.12.15

FutureNet NXR-160/LW: 21.8.3

FutureNet NXR-230/C: 5.30.12

FutureNet NXR-350/C: 5.30.9

FutureNet NXR-530: 21.11.13

FutureNet NXR-610X: 21.14.11

FutureNet NXR-650: 21.16.1

FutureNet NXR-1300: 7.4.9

CPE2.3

External links

http://jvn.jp/en/vu/JVNVU96424864/index.html
http://www.centurysys.co.jp/backnumber/nxr_common/20240716-01.html

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote authenticated privileged user via the Internet.

How the attacker can exploit this vulnerability?

The attacker would have to send a specially crafted request to the affected device in order to exploit this vulnerability.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

3) OS Command Injection

EUVDB-ID: #VU94612

Risk: High

CVSSv3.1: 8.5 [CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C]

CVE-ID: CVE-2024-36491

CWE-ID: CWE-78 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

Exploit availability: No

Description

The vulnerability allows a remote attacker to execute arbitrary shell commands on the target system.

The vulnerability exists due to improper input validation. A remote unauthenticated attacker can pass specially crafted data to the application and execute arbitrary OS commands on the target system.

Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.

Mitigation

Install update from vendor's website.

Vulnerable software versions

FutureNet WXR-250: 1.4.7

FutureNet NXR-120/C: 5.25.7H

FutureNet NXR-125/CX: 5.25.7H

FutureNet NXR-155/C: 5.22.5M

FutureNet NXR-130/C: 5.13.21

FutureNet NXR-1200: 5.25.21

FutureNet VXR/x86: 10.1.4

FutureNet VXR/x64: 21.7.31

FutureNet NXR-G050: 21.12.9

FutureNet NXR-G060: 21.15.5

FutureNet NXR-G100: 6.23.10

FutureNet NXR-G110: 21.7.30C

FutureNet NXR-G120: 21.15.2

FutureNet NXR-G180/L-CA: 21.7.28B

FutureNet NXR-G200: 9.12.15

FutureNet NXR-160/LW: 21.8.3

FutureNet NXR-230/C: 5.30.12

FutureNet NXR-350/C: 5.30.9

FutureNet NXR-530: 21.11.13

FutureNet NXR-610X: 21.14.11

FutureNet NXR-650: 21.16.1

FutureNet NXR-1300: 7.4.9

CPE2.3

External links

http://jvn.jp/en/vu/JVNVU96424864/index.html
http://www.centurysys.co.jp/backnumber/nxr_common/20240716-01.html

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.

How the attacker can exploit this vulnerability?

The attacker would have to send a specially crafted request to the affected device in order to exploit this vulnerability.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

4) Buffer overflow

EUVDB-ID: #VU26625

Risk: High

CVSSv3.1: 8.5 [CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C]

CVE-ID: CVE-2020-10188

CWE-ID: CWE-119 - Memory corruption

Exploit availability: No

Description

The vulnerability allows a remote attacker to execute arbitrary code on the target system.

The vulnerability exists due to a boundary involving the netclear and nextitem functions within the utility.c in telnetd daemon from netkit telnet. A remote attacker can end specially crafted data to the telnetd daemon, trigger a boundary error and execute arbitrary code on the target system.

Mitigation

Install update from vendor's website.

Vulnerable software versions

FutureNet WXR-250: 1.4.7

FutureNet NXR-120/C: 5.25.7H

FutureNet NXR-125/CX: 5.25.7H

FutureNet NXR-155/C: 5.22.5M

FutureNet NXR-130/C: 5.13.21

FutureNet NXR-1200: 5.25.21

FutureNet VXR/x86: 10.1.4

FutureNet VXR/x64: 21.7.31

FutureNet NXR-G050: 21.12.9

FutureNet NXR-G060: 21.15.5

FutureNet NXR-G100: 6.23.10

FutureNet NXR-G110: 21.7.30C

FutureNet NXR-G120: 21.15.2

FutureNet NXR-G180/L-CA: 21.7.28B

FutureNet NXR-G200: 9.12.15

FutureNet NXR-160/LW: 21.8.3

FutureNet NXR-230/C: 5.30.12

FutureNet NXR-350/C: 5.30.9

FutureNet NXR-530: 21.11.13

FutureNet NXR-610X: 21.14.11

FutureNet NXR-650: 21.16.1

FutureNet NXR-1300: 7.4.9

CPE2.3

External links

http://jvn.jp/en/vu/JVNVU96424864/index.html
http://www.centurysys.co.jp/backnumber/nxr_common/20240716-01.html

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.

How the attacker can exploit this vulnerability?

The attacker would have to send a specially crafted request to the affected device in order to exploit this vulnerability.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.