Century Systems FutureNet AS and FA Series Buffer Overflow Vulnerability Allowing Device Reboot

A buffer overflow vulnerability has been identified in the FutureNet AS series (Industrial Routers) and FA series (Protocol Conversion Machine) by Century Systems Co., Ltd. This vulnerability allows remote, unauthenticated attackers to reboot the device by sending a specially crafted request. The issue affects multiple firmware versions, with specific vulnerable and patched versions listed in the vendor advisory.

Impact

Exploitation of this vulnerability allows for a remote, unauthenticated reboot of the affected device.

Remediation

Users are advised to update the firmware to the latest version. For AS series devices, if an immediate update is not possible, consider not publishing the device's web server port to the WAN or restricting web server access to trusted IP addresses.