What’s Vulnerable › Vulnerabilities

CVE-2025-24846

• Severity: high (CVSS 7.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.5% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2025-03-03 · updated 2026-06-17
• Weakness: CWE-288

Description

Authentication bypass vulnerability exists in FutureNet AS series (Industrial Routers) provided by Century Systems Co., Ltd. If this vulnerability is exploited, a remote unauthenticated attacker may obtain the device information such as MAC address by sending a specially crafted request.

Affected products

• Century Systems Co., Ltd. FutureNet AS-210/U4: through firmware Version 2.6.4
• Century Systems Co., Ltd. FutureNet AS-250/F-KO: through firmware Version 1.14.0
• Century Systems Co., Ltd. FutureNet AS-250/F-SC: through firmware Version 1.14.0
• Century Systems Co., Ltd. FutureNet AS-250/KL: through firmware Version 1.14.0
• Century Systems Co., Ltd. FutureNet AS-250/KL Rev2: through firmware Version 2.6.4
• Century Systems Co., Ltd. FutureNet AS-250/L: through firmware Version 2.6.4
• Century Systems Co., Ltd. FutureNet AS-250/NL: through firmware Version 1.14.0
• Century Systems Co., Ltd. FutureNet AS-250/S: through firmware Version 1.14.0
• Century Systems Co., Ltd. FutureNet AS-M250/KL: through firmware Version 2.6.4
• Century Systems Co., Ltd. FutureNet AS-M250/L: through firmware Version 2.6.4
• Century Systems Co., Ltd. FutureNet AS-M250/NL: through firmware Version 2.6.4
• Century Systems Co., Ltd. FutureNet AS-P250/KL: through firmware Version 2.6.4
• Century Systems Co., Ltd. FutureNet AS-P250/NL: through firmware Version 2.6.4

References

• https://jvn.jp/en/vu/JVNVU96398949/
• https://www.centurysys.co.jp/backnumber/common/jvnvu96398949.html

Get alerted when CVE-2025-24846 or the next vulnerability affects your stack