Skip to content
Fencer Vulns
critical 9.1

CVE-2024-31070 json

Initialization of a resource with an insecure default vulnerability in FutureNet NXR series, VXR series and WXR series provided by Century…

published 2024-07-17 2 y ago modified 2026-06-17 4 mo ago also EUVD-2024-34444

cvss
9.1
version 3.1, CNA
cisa kev
Not listed
not in CISA's catalog
epss
0.8%
EPSS 0.8% chance of exploitation in 30 days, percentile 55%
public exploits
0
none known

Summary

Initialization of a resource with an insecure default vulnerability in FutureNet NXR series, VXR series and WXR series provided by Century Systems Co., Ltd. allows a remote unauthenticated attacker to access telnet service unlimitedly.

Patch / fix

  • centurysys futurenet_nxr-1300_firmware 7.4.10
  • centurysys futurenet_nxr-610x_firmware 21.14.11c
  • centurysys futurenet_nxr-g050_firmware 21.12.10
  • centurysys futurenet_nxr-g060_firmware 21.15.6
  • centurysys futurenet_nxr-g100_firmware 6.23.11
  • centurysys futurenet_nxr-g110_firmware 21.7.32
  • centurysys futurenet_nxr-g120_firmware 21.15.2c
  • centurysys futurenet_nxr-g200_firmware 9.12.16
  • centurysys futurenet_vxr-x64 21.7.32
  • centurysys futurenet_vxr-x86 10.1.5
  • centurysys futurenet_nxr-160/lw_firmware 21.8.4
  • centurysys futurenet_nxr-230/c_firmware 5.30.13
  • centurysys futurenet_nxr-350/c_firmware 5.30.9c
  • centurysys futurenet_nxr-530_firmware 21.11.14
  • centurysys futurenet_nxr-650_firmware 21.16.2
  • centurysys futurenet_nxr-g180/l-ca_firmware 21.7.28c

CISA SSVC

Exploitation
none
Automatable
yes
Technical impact
partial
Assessed
2 y ago

Exploit prediction

0.75% chance of exploitation in the next 30 days, higher than 55% of all scored CVEs (FIRST EPSS, 2026-11-08).

CVSS scores

assigned by version score vector
CISA ADP 3.1 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
NVD 3.1 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
CNA 3.1 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H

Affected products

  • Century Systems Co., Ltd. FutureNet NXR-1300 series
  • Century Systems Co., Ltd. FutureNet NXR-650
  • Century Systems Co., Ltd. FutureNet NXR-610X series
  • Century Systems Co., Ltd. FutureNet NXR-530
  • Century Systems Co., Ltd. FutureNet NXR-350/C
  • Century Systems Co., Ltd. FutureNet NXR-230/C
  • Century Systems Co., Ltd. FutureNet NXR-160/LW
  • Century Systems Co., Ltd. FutureNet NXR-G200 series
  • Century Systems Co., Ltd. FutureNet NXR-G180/L-CA
  • Century Systems Co., Ltd. FutureNet NXR-G120 series
  • Century Systems Co., Ltd. FutureNet NXR-G110 series
  • Century Systems Co., Ltd. FutureNet NXR-G100 series
  • Century Systems Co., Ltd. FutureNet NXR-G060 series
  • Century Systems Co., Ltd. FutureNet NXR-G050 series
  • Century Systems Co., Ltd. FutureNet VXR/x64
  • Century Systems Co., Ltd. FutureNet VXR/x86
  • Century Systems Co., Ltd. FutureNet NXR-1200
  • Century Systems Co., Ltd. FutureNet NXR-130/C
  • Century Systems Co., Ltd. FutureNet NXR-155/C series
  • Century Systems Co., Ltd. FutureNet NXR-125/CX
  • Century Systems Co., Ltd. FutureNet NXR-120/C
  • Century Systems Co., Ltd. FutureNet WXR-250
  • centurysys futurenet_nxr-1300_firmware
  • centurysys futurenet_nxr-650_firmware
  • centurysys futurenet_nxr-610x_firmware
  • centurysys futurenet_nxr-530_firmware
  • centurysys futurenet_nxr-350\/c_firmware
  • centurysys futurenet_nxr-230\/c_firmware
  • centurysys futurenet_nxr-160\/lw_firmware
  • centurysys futurenet_nxr-g200_firmware
  • centurysys futurenet_nxr-g180\/l-ca_firmware
  • centurysys futurenet_nxr-g120_firmware
  • centurysys futurenet_nxr-g110_firmware
  • centurysys futurenet_nxr-g100_firmware
  • centurysys futurenet_nxr-g060_firmware
  • centurysys futurenet_nxr-g050_firmware
  • centurysys futurenet_vxr\/x64_firmware
  • centurysys futurenet_vxr\/x86_firmware
  • centurysys futurenet_nxr-1200_firmware
  • centurysys futurenet_nxr-130\/c_firmware
  • centurysys futurenet_nxr-155\/c_firmware
  • centurysys futurenet_nxr-125\/cx_firmware
  • centurysys futurenet_nxr-120\/c_firmware
  • centurysys futurenet_wxr-250_firmware

Classification

Weakness
  • CWE-1188 Initialization of a Resource with an Insecure Default

References

Sources

Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.