high8.8
CVE-2024-36475
FutureNet NXR series, VXR series and WXR series provided by Century Systems Co., Ltd.
Impact
FutureNet NXR series, VXR series and WXR series provided by Century Systems Co., Ltd. contain an active debug code vulnerability. If a user who knows how to use the debug function logs in to the product, the debug function may be used and an arbitrary OS command may be executed.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Centurysys | Futurenet Nxr-1300 Firmware | before 7.4.10 |
| Centurysys | Futurenet Nxr-155\/C Firmware | All versions |
| Centurysys | Futurenet Nxr-610x Firmware | before 21.14.11c |
| Centurysys | Futurenet Nxr-G050 Firmware | before 21.12.10 |
| Centurysys | Futurenet Nxr-G060 Firmware | before 21.15.6 |
| Centurysys | Futurenet Nxr-G100 Firmware | before 6.23.11 |
| Centurysys | Futurenet Nxr-G110 Firmware | before 21.7.32 |
| Centurysys | Futurenet Nxr-G120 Firmware | before 21.15.2c |
| Centurysys | Futurenet Nxr-G200 Firmware | before 9.12.16 |
| Centurysys | Futurenet Vxr-X64 | before 21.7.32 |
| Centurysys | Futurenet Vxr-X86 | before 10.1.5 |
| Centurysys | Futurenet Nxr-160\/Lw Firmware | before 21.8.4 |
Weakness classification
References
- NVD record
- CVE.org record
- https://jvn.jp/en/vu/JVNVU96424864/
- https://www.centurysys.co.jp/backnumber/nxr_common/20240716-01.html
- https://www.centurysys.co.jp/backnumber/nxr_common/20240716-03.html
- https://jvn.jp/en/vu/JVNVU96424864/
- https://www.centurysys.co.jp/backnumber/nxr_common/20240716-01.html
- https://www.centurysys.co.jp/backnumber/nxr_common/20240716-03.html