漏洞信息
尽管我们使用了先进的大模型技术，但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性，但请您根据实际情况进行核实和判断。
Vulnerability Title
N/A
Vulnerability Description
FutureNet NXR series routers provided by Century Systems Co., Ltd. have REST-APIs, which are configured as disabled in the initial (factory default) configuration. But, REST-APIs are unexpectedly enabled when the affected product is powered up, provided either http-server (GUI) or Web authentication is enabled. The factory default configuration makes http-server (GUI) enabled, which means REST-APIs are also enabled. The username and the password for REST-APIs are configured in the factory default configuration. As a result, an attacker may obtain and/or alter the affected product's settings via REST-APIs.
CVSS Information
N/A
Vulnerability Type
特定函数功能的不正确供给
Vulnerability Title
Century Systems FutureNet NXR 安全漏洞
Vulnerability Description
Century Systems FutureNet NXR是日本Century Systems公司的一系列路由器。 Century Systems FutureNet NXR存在安全漏洞，该漏洞源于初始配置中REST-APIs在设备启动时意外启用,攻击者可能通过REST-API获取或更改受影响产品的设置。
CVSS Information
N/A
Vulnerability Type
N/A