FutureNet NXR series, VXR series and WXR series provided by Century Systems Co., Ltd. allow an administrative user to execute an arbitrary OS command, obtain and/or alter sensitive information, and cause a denial-of-service (DoS) condition.
Search vulnerabilities
CVE-2024-36491
CVSS 3.1 · 9.8 Critical
EPSS < 1%
KEV · Not listed
Vendors
Products
CVE-2024-36475
FutureNet NXR series, VXR series and WXR series provided by Century Systems Co., Ltd. contain an active debug code vulnerability. If a user who knows how to use the debug function logs in to the product, the debug function may be used and an arbitrary OS command may be executed.
CVSS 3.1 · 7.2 High
EPSS < 1%
KEV · Not listed
Vendors
Products
CVE-2024-31070
Initialization of a resource with an insecure default vulnerability in FutureNet NXR series, VXR series and WXR series provided by Century Systems Co., Ltd. allows a remote unauthenticated attacker to access telnet service unlimitedly.
CVSS 3.1 · 9.1 Critical
EPSS < 1%
KEV · Not listed
Vendors
Products
Page 1 of 1.