JVNDB-2025-001898
Vulnerability from jvndb - Published: 2025-03-04 14:56 - Updated:2025-03-04 14:56
Severity ?
Summary
Multiple vulnerabilities in FutureNet AS series (Industrial Routers) and FA series (Protocol Conversion Machine)
Details
FutureNet AS series (Industrial Routers) and FA series (Protocol Conversion Machine) provided by Century Systems Co., Ltd. contain multiple vulnerabilities listed below.
* Authentication Bypass (CWE-288) - CVE-2025-24846
* Buffer Overflow (CWE-120) - CVE-2025-25280
Chuya Hayakawa and Ryo Kamino of 00One, Inc. reported these vulnerabilities to JPCERT/CC.
JPCERT/CC coordinated with the developer.
References
| Type | URL | ||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
|
|||||||||||||||||
Impacted products
{
"@rdf:about": "https://jvndb.jvn.jp/en/contents/2025/JVNDB-2025-001898.html",
"dc:date": "2025-03-04T14:56+09:00",
"dcterms:issued": "2025-03-04T14:56+09:00",
"dcterms:modified": "2025-03-04T14:56+09:00",
"description": "FutureNet AS series (Industrial Routers) and FA series (Protocol Conversion Machine) provided by Century Systems Co., Ltd. contain multiple vulnerabilities listed below.\r\n\r\n * Authentication Bypass (CWE-288) - CVE-2025-24846\r\n * Buffer Overflow (CWE-120) - CVE-2025-25280\r\n\r\nChuya Hayakawa and Ryo Kamino of 00One, Inc. reported these vulnerabilities to JPCERT/CC.\r\nJPCERT/CC coordinated with the developer.",
"link": "https://jvndb.jvn.jp/en/contents/2025/JVNDB-2025-001898.html",
"sec:cpe": [
{
"#text": "cpe:/o:centurysys:futurenet_as-210/u4_firmware",
"@product": "FutureNet AS-210/U4 firmware",
"@vendor": "Century Systems Co., Ltd.",
"@version": "2.2"
},
{
"#text": "cpe:/o:centurysys:futurenet_as-250/f-ko_firmware",
"@product": "FutureNet AS-250/F-KO firmware",
"@vendor": "Century Systems Co., Ltd.",
"@version": "2.2"
},
{
"#text": "cpe:/o:centurysys:futurenet_as-250/f-sc_firmware",
"@product": "FutureNet AS-250/F-SC firmware",
"@vendor": "Century Systems Co., Ltd.",
"@version": "2.2"
},
{
"#text": "cpe:/o:centurysys:futurenet_as-250/kl_firmware",
"@product": "FutureNet AS-250/KL firmware",
"@vendor": "Century Systems Co., Ltd.",
"@version": "2.2"
},
{
"#text": "cpe:/o:centurysys:futurenet_as-250/kl_rev2_firmware",
"@product": "FutureNet AS-250/KL Rev2 firmware",
"@vendor": "Century Systems Co., Ltd.",
"@version": "2.2"
},
{
"#text": "cpe:/o:centurysys:futurenet_as-250/l_firmware",
"@product": "FutureNet AS-250/L firmware",
"@vendor": "Century Systems Co., Ltd.",
"@version": "2.2"
},
{
"#text": "cpe:/o:centurysys:futurenet_as-250/nl_firmware",
"@product": "FutureNet AS-250/NL firmware",
"@vendor": "Century Systems Co., Ltd.",
"@version": "2.2"
},
{
"#text": "cpe:/o:centurysys:futurenet_as-250/s_firmware",
"@product": "FutureNet AS-250/S firmware",
"@vendor": "Century Systems Co., Ltd.",
"@version": "2.2"
},
{
"#text": "cpe:/o:centurysys:futurenet_as-m250/kl_firmware",
"@product": "FutureNet AS-M250/KL firmware",
"@vendor": "Century Systems Co., Ltd.",
"@version": "2.2"
},
{
"#text": "cpe:/o:centurysys:futurenet_as-m250/l_firmware",
"@product": "FutureNet AS-M250/L firmware",
"@vendor": "Century Systems Co., Ltd.",
"@version": "2.2"
},
{
"#text": "cpe:/o:centurysys:futurenet_as-m250/nl_firmware",
"@product": "FutureNet AS-M250/NL firmware",
"@vendor": "Century Systems Co., Ltd.",
"@version": "2.2"
},
{
"#text": "cpe:/o:centurysys:futurenet_as-p250/kl_firmware",
"@product": "FutureNet AS-P250/KL firmware",
"@vendor": "Century Systems Co., Ltd.",
"@version": "2.2"
},
{
"#text": "cpe:/o:centurysys:futurenet_as-p250/nl_firmware",
"@product": "FutureNet AS-P250/NL firmware",
"@vendor": "Century Systems Co., Ltd.",
"@version": "2.2"
},
{
"#text": "cpe:/o:centurysys:futurenet_fa-210_firmware",
"@product": "FutureNet FA-210 firmware",
"@vendor": "Century Systems Co., Ltd.",
"@version": "2.2"
},
{
"#text": "cpe:/o:centurysys:futurenet_fa-215_firmware",
"@product": "FutureNet FA-215 firmware",
"@vendor": "Century Systems Co., Ltd.",
"@version": "2.2"
}
],
"sec:cvss": {
"@score": "7.5",
"@severity": "High",
"@type": "Base",
"@vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"@version": "3.0"
},
"sec:identifier": "JVNDB-2025-001898",
"sec:references": [
{
"#text": "https://jvn.jp/en/vu/JVNVU96398949/index.html",
"@id": "JVNVU#96398949",
"@source": "JVN"
},
{
"#text": "https://www.cve.org/CVERecord?id=CVE-2025-24846",
"@id": "CVE-2025-24846",
"@source": "CVE"
},
{
"#text": "https://www.cve.org/CVERecord?id=CVE-2025-25280",
"@id": "CVE-2025-25280",
"@source": "CVE"
},
{
"#text": "https://cwe.mitre.org/data/definitions/120.html",
"@id": "CWE-120",
"@title": "Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)(CWE-120)"
},
{
"#text": "https://cwe.mitre.org/data/definitions/288.html",
"@id": "CWE-288",
"@title": "Authentication Bypass Using an Alternate Path or Channel(CWE-288)"
}
],
"title": "Multiple vulnerabilities in FutureNet AS series (Industrial Routers) and FA series (Protocol Conversion Machine)"
}
Loading…
Loading…
Sightings
| Author | Source | Type | Date |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
Loading…