CVE-2024-36491

CRITICAL

9.8

Descricao

FutureNet NXR series, VXR series and WXR series provided by Century Systems Co., Ltd. allow an administrative user to execute an arbitrary OS command, obtain and/or alter sensitive information, and cause a denial-of-service (DoS) condition.

Detalhes CVE

Pontuacao CVSS v3.19.8

SeveridadeCRITICAL

Vetor CVSSCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Vetor de ataqueNETWORK

ComplexidadeLOW

Privilegios necessariosNONE

Interacao do usuarioNONE

Publicado7/17/2024

Ultima modificacao4/1/2025

Fontenvd

Avistamentos honeypot0

Produtos afetados

centurysys:futurenet_nxr-1200centurysys:futurenet_nxr-1200_firmwarecenturysys:futurenet_nxr-120\/ccenturysys:futurenet_nxr-120\/c_firmwarecenturysys:futurenet_nxr-125\/cx_firmwarecenturysys:futurenet_nxr-1300_firmwarecenturysys:futurenet_nxr-130\/ccenturysys:futurenet_nxr-130\/c_firmwarecenturysys:futurenet_nxr-155\/c_firmwarecenturysys:futurenet_nxr-160\/lwcenturysys:futurenet_nxr-160\/lw_firmwarecenturysys:futurenet_nxr-230\/ccenturysys:futurenet_nxr-230\/c_firmwarecenturysys:futurenet_nxr-350\/ccenturysys:futurenet_nxr-350\/c_firmwarecenturysys:futurenet_nxr-530centurysys:futurenet_nxr-530_firmwarecenturysys:futurenet_nxr-610x_firmwarecenturysys:futurenet_nxr-650_firmwarecenturysys:futurenet_nxr-g050_firmwarecenturysys:futurenet_nxr-g060_firmwarecenturysys:futurenet_nxr-g100_firmwarecenturysys:futurenet_nxr-g110_firmwarecenturysys:futurenet_nxr-g120_firmwarecenturysys:futurenet_nxr-g180\/l-cacenturysys:futurenet_nxr-g180\/l-ca_firmwarecenturysys:futurenet_nxr-g200_firmwarecenturysys:futurenet_vxr-x64centurysys:futurenet_vxr-x86centurysys:futurenet_wxr-250centurysys:futurenet_wxr-250_firmware

Fraquezas (CWE)

CWE-78CWE-78

Referencias

https://jvn.jp/en/vu/JVNVU96424864/(vultures@jpcert.or.jp)

https://www.centurysys.co.jp/backnumber/nxr_common/20240716-01.html(vultures@jpcert.or.jp)

https://www.centurysys.co.jp/backnumber/nxr_common/20240716-03.html(vultures@jpcert.or.jp)

https://jvn.jp/en/vu/JVNVU96424864/(af854a3a-2127-422b-91ae-364da2661108)

https://www.centurysys.co.jp/backnumber/nxr_common/20240716-01.html(af854a3a-2127-422b-91ae-364da2661108)

https://www.centurysys.co.jp/backnumber/nxr_common/20240716-03.html(af854a3a-2127-422b-91ae-364da2661108)

Correlacoes IOC

Sem correlacoes registradas

This product uses data from the NVD API but is not endorsed or certified by the NVD.