by Kastro CVE-2024-36491
Century Systems Co., Ltd. FutureNet NXR-1300 series — FutureNet NXR series, VXR series and WXR series provided by Century Systems Co., Ltd.
Description · from the CVE record
FutureNet NXR series, VXR series and WXR series provided by Century Systems Co., Ltd. allow an administrative user to execute an arbitrary OS command, obtain and/or alter sensitive information, and cause a denial-of-service (DoS) condition.
Affected
ProductAffectedFixed inSource
FutureNet NXR-1300 seriesfirmware version 7.4.9 and earlier–CNA
FutureNet NXR-650firmware version 21.16.1 and earlier–CNA
FutureNet NXR-610X seriesfirmware version 21.14.11 and earlier–CNA
FutureNet NXR-530firmware version 21.11.13 and earlier–CNA
FutureNet NXR-350/Cfirmware version 5.30.9 and earlier–CNA
FutureNet NXR-230/Cfirmware version 5.30.12 and earlier–CNA
FutureNet NXR-160/LWfirmware version 21.8.3 and earlier–CNA
FutureNet NXR-G200 seriesfirmware version 9.12.15 and earlier–CNA
FutureNet NXR-G180/L-CAfirmware version 21.7.28B and earlier–CNA
FutureNet NXR-G120 seriesfirmware version 21.15.2 and earlier–CNA
FutureNet NXR-G110 seriesfirmware version 21.7.30C and earlier–CNA
FutureNet NXR-G100 seriesfirmware version 6.23.10 and earlier–CNA
Scores by source
CISA ADP9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: total