CVE-2024-50357 Misconfiguration in FutureNet NXR-G050 series
Attackers can read and modify router settings via REST APIs that are unexpectedly enabled by default, exposing sensitive configuration data.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2024-50357?
CVE-2024-50357 is a critical vulnerability in Century Systems Co., Ltd. FutureNet NXR-G050 series, published on 29 Nov 2024. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
FutureNet NXR series routers provided by Century Systems Co., Ltd. have REST-APIs, which are configured as disabled in the initial (factory default) configuration. But, REST-APIs are unexpectedly enabled when the affected product is powered up, provided either http-server (GUI) or Web authentication is enabled. The factory default configuration makes http-server (GUI) enabled, which means REST-APIs are also enabled. The username and the password for REST-APIs are configured in the factory default configuration. As a result, an attacker may obtain and/or alter the affected product's settings via REST-APIs.
Weakness: CWE-684
Which versions are affected by CVE-2024-50357?
How do I fix CVE-2024-50357?
No fix has been published for CVE-2024-50357 yet. Limit exposure of the affected software until one is available.
Is CVE-2024-50357 being exploited?
There is no known exploitation of CVE-2024-50357 in the wild and no public exploit code.
Sources
Also known as GHSA-g6j3-5m8r-7p3c.