CVE-2024-36475

FutureNet NXR series, VXR series and WXR series provided by Century Systems Co., Ltd. contain an active debug code vulnerability. If a user who knows how to use the debug function logs in to the product, the debug function may be used and an arbitrary OS command may be executed.

• centurysys futurenet nxr-1300 firmware (< 7.4.10) • centurysys futurenet nxr-155\/c firmware • centurysys futurenet nxr-610x firmware (< 21.14.11c) • centurysys futurenet nxr-g050 firmware (< 21.12.10) • centurysys futurenet nxr-g060 firmware (< 21.15.6) • centurysys futurenet nxr-g100 firmware (< 6.23.11) • centurysys futurenet nxr-g110 firmware (< 21.7.32) • centurysys futurenet nxr-g120 firmware (< 21.15.2c) • centurysys futurenet nxr-g200 firmware (< 9.12.16) • centurysys futurenet vxr-x64 (< 21.7.32) • centurysys futurenet vxr-x86 (< 10.1.5) • centurysys futurenet nxr-160\/lw firmware (< 21.8.4) • centurysys futurenet nxr-230\/c firmware (< 5.30.13) • centurysys futurenet nxr-350\/c firmware (< 5.30.9c) • centurysys futurenet nxr-530 firmware (< 21.11.14) • centurysys futurenet nxr-650 firmware (< 21.16.2) • centurysys futurenet nxr-g180\/l-ca firmware (< 21.7.28c) • centurysys futurenet nxr-130\/c firmware • centurysys futurenet nxr-125\/cx firmware • centurysys futurenet nxr-120\/c firmware • centurysys futurenet wxr-250 firmware • centurysys futurenet nxr-1200 firmware