UNIX symbolic link (Symlink) following issue exists in FutureNet NXR series, VXR series and WXR series routers.
- Published
- Last modified
- Where the record stands: published, rejected by its publisher, or superseded by another id.What do these mean? →
- published
- Whether CISA lists it in its Known Exploited Vulnerabilities catalog: proof that attackers are using it.What do these mean? →
- Not listed in CISA KEV
- Whether working attack code is public (Exploit-DB, Metasploit, Nuclei or GitHub). Public code makes attacks easier.What do these mean? →
- None on Exploit-DB, Metasploit or GitHub
- Exploitation: none
- Automatable: no
- Technical impact: total
Summary
UNIX symbolic link (Symlink) following issue exists in FutureNet NXR series, VXR series and WXR series routers. Attaching to the affected product an external storage containing malicious symbolic link files, a logged-in administrative user may obtain and/or destroy internal files.
Timeline
- CVE published
- CISA SSVC assessment
Exploitation: none · Automatable: no · Technical impact: total
- Record last updated
Affected versions
- Century Systems Co., Ltd. FutureNet NXR-1420
Version range not reported
- Century Systems Co., Ltd. FutureNet NXR-1300 series
Version range not reported
- Century Systems Co., Ltd. FutureNet NXR-650
Version range not reported
- Century Systems Co., Ltd. FutureNet NXR-610X series
Version range not reported
- Century Systems Co., Ltd. FutureNet NXR-530
Version range not reported
- Century Systems Co., Ltd. FutureNet NXR-350/C
Version range not reported
- Century Systems Co., Ltd. FutureNet NXR-230/C
Version range not reported
- Century Systems Co., Ltd. FutureNet NXR-160/LW
Version range not reported
- Century Systems Co., Ltd. FutureNet NXR-G540 series
firmware version 21.17.0
- Century Systems Co., Ltd. FutureNet NXR-G260 series
Version range not reported
- Century Systems Co., Ltd. FutureNet NXR-G240 series
Version range not reported
- Century Systems Co., Ltd. FutureNet NXR-G180/L-CA
Version range not reported
- Century Systems Co., Ltd. FutureNet NXR-G120 series
Version range not reported
- Century Systems Co., Ltd. FutureNet NXR-G110 series
Version range not reported
- Century Systems Co., Ltd. FutureNet NXR-G100 series
Version range not reported
- Century Systems Co., Ltd. FutureNet NXR-G060 series
Version range not reported
- Century Systems Co., Ltd. FutureNet NXR-G050 series
Version range not reported
- Century Systems Co., Ltd. FutureNet VXR-x64
Version range not reported
- Century Systems Co., Ltd. FutureNet VXR-x86
Version range not reported
- Century Systems Co., Ltd. FutureNet NXR-1200
Version range not reported
- Century Systems Co., Ltd. FutureNet NXR-130/C
Version range not reported
- Century Systems Co., Ltd. FutureNet NXR-155/C-L
Version range not reported
- Century Systems Co., Ltd. FutureNet NXR-155/C-XW
Version range not reported
- Century Systems Co., Ltd. FutureNet NXR-155/C-WM
Version range not reported
- Century Systems Co., Ltd. FutureNet NXR-125/CX
Version range not reported
- Century Systems Co., Ltd. FutureNet NXR-120/C
Version range not reported
- Century Systems Co., Ltd. FutureNet NXR-G100/SLW
Version range not reported
- Century Systems Co., Ltd. FutureNet NXR-G100/SL
Version range not reported
- Century Systems Co., Ltd. FutureNet NXR-G100/S
Version range not reported
- Century Systems Co., Ltd. FutureNet NXR-G100/N
Version range not reported
- Century Systems Co., Ltd. FutureNet NXR-G100/F
Version range not reported
- Century Systems Co., Ltd. FutureNet WXR-250
Version range not reported