critical9.8
CVE-2024-36491
FutureNet NXR series, VXR series and WXR series provided by Century Systems Co., Ltd.
Impact
FutureNet NXR series, VXR series and WXR series provided by Century Systems Co., Ltd. allow an administrative user to execute an arbitrary OS command, obtain and/or alter sensitive information, and cause a denial-of-service (DoS) condition.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Centurysys | Futurenet Nxr-1300 Firmware | before 7.4.10 |
| Centurysys | Futurenet Nxr-155\/C Firmware | All versions |
| Centurysys | Futurenet Nxr-610x Firmware | before 21.14.11c |
| Centurysys | Futurenet Nxr-G050 Firmware | before 21.12.10 |
| Centurysys | Futurenet Nxr-G060 Firmware | before 21.15.6 |
| Centurysys | Futurenet Nxr-G100 Firmware | before 6.23.11 |
| Centurysys | Futurenet Nxr-G110 Firmware | before 21.7.32 |
| Centurysys | Futurenet Nxr-G120 Firmware | before 21.15.2c |
| Centurysys | Futurenet Nxr-G200 Firmware | before 9.12.16 |
| Centurysys | Futurenet Vxr-X64 | before 21.7.32 |
| Centurysys | Futurenet Vxr-X86 | before 10.1.5 |
| Centurysys | Futurenet Nxr-160\/Lw Firmware | before 21.8.4 |
Weakness classification
References
- NVD record
- CVE.org record
- https://jvn.jp/en/vu/JVNVU96424864/
- https://www.centurysys.co.jp/backnumber/nxr_common/20240716-01.html
- https://www.centurysys.co.jp/backnumber/nxr_common/20240716-03.html
- https://jvn.jp/en/vu/JVNVU96424864/
- https://www.centurysys.co.jp/backnumber/nxr_common/20240716-01.html
- https://www.centurysys.co.jp/backnumber/nxr_common/20240716-03.html