Critical · published November 29, 2024
🚨 Surprise! Your FutureNet NXR router's REST-APIs are enabled right out of the box, just waiting for an adventurous attacker to stroll in. 🔥 It's like a hotel room that comes with an unlocked mini-bar — the previous guest could have left it stocked with goodies, and anyone could help themselves without checking in! If an attacker gains access, they could alter your router settings, reroute your traffic, or even snoop on your network. This could lead to data breaches, unauthorized surveillance, or a complete takeover of your network!
It's like a hotel room that comes with an unlocked mini-bar — the previous guest could have left it stocked with goodies, and anyone could help themselves without checking in! This vulnerability arises because the REST-APIs, although set to 'disabled' by default, are unexpectedly enabled when the http-server (GUI) or Web authentication is turned on, allowing attackers to access sensitive settings using factory default credentials.
If an attacker gains access, they could alter your router settings, reroute your traffic, or even snoop on your network. This could lead to data breaches, unauthorized surveillance, or a complete takeover of your network! Immediately disable the REST-APIs if they're not needed and change any factory default credentials. Additionally, check for any available firmware updates from Century Systems Co., Ltd. to address this issue. You've got this! Follow these steps and you'll be reinforcing your router security in no time! 🛡️