CVEvulnerability

CVE-2024-36491

9.8 CRITICAL Published 2024-07-17 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2024-07-17
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
9.8 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0)
9.8 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weaknesses
CWE-78

Description

FutureNet NXR series, VXR series and WXR series provided by Century Systems Co., Ltd. allow an administrative user to execute an arbitrary OS command, obtain and/or alter sensitive information, and cause a denial-of-service (DoS) condition.

Affected configurations

• centurysys futurenet nxr-1300 firmware (< 7.4.10) • centurysys futurenet nxr-155\/c firmware • centurysys futurenet nxr-610x firmware (< 21.14.11c) • centurysys futurenet nxr-g050 firmware (< 21.12.10) • centurysys futurenet nxr-g060 firmware (< 21.15.6) • centurysys futurenet nxr-g100 firmware (< 6.23.11) • centurysys futurenet nxr-g110 firmware (< 21.7.32) • centurysys futurenet nxr-g120 firmware (< 21.15.2c) • centurysys futurenet nxr-g200 firmware (< 9.12.16) • centurysys futurenet vxr-x64 (< 21.7.32) • centurysys futurenet vxr-x86 (< 10.1.5) • centurysys futurenet nxr-160\/lw firmware (< 21.8.4) • centurysys futurenet nxr-230\/c firmware (< 5.30.13) • centurysys futurenet nxr-350\/c firmware (< 5.30.9c) • centurysys futurenet nxr-530 firmware (< 21.11.14) • centurysys futurenet nxr-650 firmware (< 21.16.2) • centurysys futurenet nxr-g180\/l-ca firmware (< 21.7.28c) • centurysys futurenet nxr-130\/c firmware • centurysys futurenet nxr-125\/cx firmware • centurysys futurenet nxr-120\/c firmware • centurysys futurenet wxr-250 firmware • centurysys futurenet nxr-1200 firmware

Related

Weakness · CWE (1)

  • CWE-78 Improper Neutralization of Special Elements used in an OS Command weakness

References