CVE-2024-31070: Centurysys Futurenet Nxr-120/c Firmware

Critical severity, CVSS 9.1. EPSS: 0.8% chance of exploitation in the next 30 days.

Initialization of a resource with an insecure default vulnerability in FutureNet NXR series, VXR series and WXR series provided by Century Systems Co., Ltd. allows a remote unauthenticated attacker to access telnet service unlimitedly.

Affected products

• Centurysys Futurenet Nxr-120/c Firmware: any version
• Centurysys Futurenet Nxr-1200 Firmware: any version
• Centurysys Futurenet Nxr-125/cx Firmware: any version
• Centurysys Futurenet Nxr-130/c Firmware: any version
• Centurysys Futurenet Nxr-1300 Firmware: before 7.4.10 (fixed in 7.4.10)
• Centurysys Futurenet Nxr-155/c Firmware: any version
• Centurysys Futurenet Nxr-160/lw Firmware: before 21.8.4 (fixed in 21.8.4)
• Centurysys Futurenet Nxr-230/c Firmware: before 5.30.13 (fixed in 5.30.13)
• Centurysys Futurenet Nxr-350/c Firmware: before 5.30.9c (fixed in 5.30.9c)
• Centurysys Futurenet Nxr-530 Firmware: before 21.11.14 (fixed in 21.11.14)
• Centurysys Futurenet Nxr-610x Firmware: before 21.14.11c (fixed in 21.14.11c)
• Centurysys Futurenet Nxr-650 Firmware: before 21.16.2 (fixed in 21.16.2)
• Centurysys Futurenet Nxr-g050 Firmware: before 21.12.10 (fixed in 21.12.10)
• Centurysys Futurenet Nxr-g060 Firmware: before 21.15.6 (fixed in 21.15.6)
• Centurysys Futurenet Nxr-g100 Firmware: before 6.23.11 (fixed in 6.23.11)
• Centurysys Futurenet Nxr-g110 Firmware: before 21.7.32 (fixed in 21.7.32)
• Centurysys Futurenet Nxr-g120 Firmware: before 21.15.2c (fixed in 21.15.2c)
• Centurysys Futurenet Nxr-g180/l-Ca Firmware: before 21.7.28c (fixed in 21.7.28c)
• Centurysys Futurenet Nxr-g200 Firmware: before 9.12.16 (fixed in 9.12.16)
• Centurysys Futurenet Vxr-x64: before 21.7.32 (fixed in 21.7.32)
• Centurysys Futurenet Vxr-x86: before 10.1.5 (fixed in 10.1.5)
• Centurysys Futurenet Wxr-250 Firmware: any version

Published 2024-07-17. Last modified 2026-06-17.