Advisories · Technology
Century Systems Co., Ltd. FutureNet NXR-G110 series.
Every CVE that names Century Systems Co., Ltd. FutureNet NXR-G110 series among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 6.2 Medium
UNIX symbolic link (Symlink) following issue exists in FutureNet NXR series, VXR series and WXR series routers.
- Century Systems Co., Ltd. FutureNet NXR-1420
- Century Systems Co., Ltd. FutureNet NXR-1300 series
- CWE-61
- CVSS 9.8 CriticalCritical · CVSS 9+
FutureNet NXR series routers provided by Century Systems Co., Ltd. have REST-APIs, which are configured as disabled in the initial (factory default) configuration.
- Century Systems Co., Ltd. FutureNet NXR-G110 series
- Century Systems Co., Ltd. FutureNet NXR-G060 series
- CWE-684
- CVSS 9.8 CriticalCritical · CVSS 9+
OS command injection in Century Systems Co., Ltd. FutureNet NXR-1300 series and others
- Century Systems Co., Ltd. FutureNet NXR-1300 series
- Century Systems Co., Ltd. FutureNet NXR-650
- Command injection
- CVSS 7.2 High
Active debug code in Century Systems Co., Ltd. FutureNet NXR-1300 series and others
- Century Systems Co., Ltd. FutureNet NXR-1300 series
- Century Systems Co., Ltd. FutureNet NXR-650
- CWE-489
- CVSS 9.1 CriticalCritical · CVSS 9+
Initialization of a resource with an insecure default vulnerability in FutureNet NXR series, VXR series and WXR series provided by Century Systems Co., Ltd. allows a remote unauthenticated attacker t…
- Century Systems Co., Ltd. FutureNet NXR-1300 series
- Century Systems Co., Ltd. FutureNet NXR-650
- CWE-1188