CVE-2024-36475

🗓️ 17 Jul 2024 08:48:33Reported by jpcertType

Century Systems Co., Ltd. debug code vulnerability in FutureNet series

Reporter	Title	Published	Views	Family All 7
Circl	CVE-2024-36475	17 Jul 202412:22	–	circl
Cvelist	CVE-2024-36475	17 Jul 202408:48	–	cvelist
Japan Vulnerability Notes	Multiple vulnerabilities in FutureNet NXR series, VXR series and WXR series	29 Jul 202408:51	–	jvn
NVD	CVE-2024-36475	17 Jul 202409:15	–	nvd
Positive Technologies	PT-2024-27018 · Futurenet · Futurenet Nxr Series	17 Jul 202400:00	–	ptsecurity
RedhatCVE	CVE-2024-36475	23 May 202507:48	–	redhatcve
Vulnrichment	CVE-2024-36475	17 Jul 202408:48	–	vulnrichment

NVD

Vulners

Node

centurysys futurenet_nxr-1300_firmwareRange<7.4.10

centurysys futurenet_nxr-155/c_firmware

centurysys futurenet_nxr-610x_firmwareRange<21.14.11c

centurysys futurenet_nxr-g050_firmwareRange<21.12.10

centurysys futurenet_nxr-g060_firmwareRange<21.15.6

centurysys futurenet_nxr-g100_firmwareRange<6.23.11

centurysys futurenet_nxr-g110_firmwareRange<21.7.32

centurysys futurenet_nxr-g120_firmwareRange<21.15.2c

centurysys futurenet_nxr-g200_firmwareRange<9.12.16

centurysys futurenet_vxr-x64Range<21.7.32

centurysys futurenet_vxr-x86Range<10.1.5

Node

centurysys futurenet_nxr-160/lw_firmwareRange<21.8.4

AND

centurysys futurenet_nxr-160/lwMatch-

Node

centurysys futurenet_nxr-230/c_firmwareRange<5.30.13

AND

centurysys futurenet_nxr-230/cMatch-

Node

centurysys futurenet_nxr-350/c_firmwareRange<5.30.9c

AND

centurysys futurenet_nxr-350/cMatch-

Node

centurysys futurenet_nxr-530_firmwareRange<21.11.14

AND

centurysys futurenet_nxr-530Match-

Node

centurysys futurenet_nxr-650_firmwareRange<21.16.2

AND

centurysys futurenet_nxr-650Match-

Node

centurysys futurenet_nxr-g180/l-ca_firmwareRange<21.7.28c

AND

centurysys futurenet_nxr-g180/l-caMatch-

Node

centurysys futurenet_nxr-130/c_firmware

AND

centurysys futurenet_nxr-130/cMatch-

Node

centurysys futurenet_nxr-125/cx_firmware

AND

centurysys futurenet_nxr-125/cxMatch-

Node

centurysys futurenet_nxr-120/c_firmware

AND

centurysys futurenet_nxr-120/cMatch-

Node

centurysys futurenet_wxr-250_firmware

AND

centurysys futurenet_wxr-250Match-

Node

centurysys futurenet_nxr-1200_firmware

AND

centurysys futurenet_nxr-1200Match-

[
  {
    "vendor": "Century Systems Co., Ltd.",
    "product": "FutureNet NXR-1300 series",
    "versions": [
      {
        "version": "firmware version 7.4.9 and earlier",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Century Systems Co., Ltd.",
    "product": "FutureNet NXR-650",
    "versions": [
      {
        "version": "firmware version 21.16.1 and earlier",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Century Systems Co., Ltd.",
    "product": "FutureNet NXR-610X series",
    "versions": [
      {
        "version": "firmware version 21.14.11 and earlier",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Century Systems Co., Ltd.",
    "product": "FutureNet NXR-530",
    "versions": [
      {
        "version": "firmware version 21.11.13 and earlier",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Century Systems Co., Ltd.",
    "product": "FutureNet NXR-350/C",
    "versions": [
      {
        "version": "firmware version 5.30.9 and earlier",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Century Systems Co., Ltd.",
    "product": "FutureNet NXR-230/C",
    "versions": [
      {
        "version": "firmware version 5.30.12 and earlier",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Century Systems Co., Ltd.",
    "product": "FutureNet NXR-160/LW",
    "versions": [
      {
        "version": "firmware version 21.8.3 and earlier",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Century Systems Co., Ltd.",
    "product": "FutureNet NXR-G200 series",
    "versions": [
      {
        "version": "firmware version 9.12.15 and earlier",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Century Systems Co., Ltd.",
    "product": "FutureNet NXR-G180/L-CA",
    "versions": [
      {
        "version": "firmware version 21.7.28B and earlier",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Century Systems Co., Ltd.",
    "product": "FutureNet NXR-G120 series",
    "versions": [
      {
        "version": "firmware version 21.15.2 and earlier",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Century Systems Co., Ltd.",
    "product": "FutureNet NXR-G110 series",
    "versions": [
      {
        "version": "firmware version 21.7.30C and earlier",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Century Systems Co., Ltd.",
    "product": "FutureNet NXR-G100 series",
    "versions": [
      {
        "version": "firmware version 6.23.10 and earlier",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Century Systems Co., Ltd.",
    "product": "FutureNet NXR-G060 series",
    "versions": [
      {
        "version": "firmware version 21.15.5 and earlier",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Century Systems Co., Ltd.",
    "product": "FutureNet NXR-G050 series",
    "versions": [
      {
        "version": "firmware version 21.12.9 and earlier",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Century Systems Co., Ltd.",
    "product": "FutureNet VXR/x64",
    "versions": [
      {
        "version": "firmware version 21.7.31 and earlier",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Century Systems Co., Ltd.",
    "product": "FutureNet VXR/x86",
    "versions": [
      {
        "version": "firmware version 10.1.4 and earlier",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Century Systems Co., Ltd.",
    "product": "FutureNet NXR-1200",
    "versions": [
      {
        "version": "firmware version 5.25.21 and earlier",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Century Systems Co., Ltd.",
    "product": "FutureNet NXR-130/C",
    "versions": [
      {
        "version": "firmware version 5.13.21 and earlier",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Century Systems Co., Ltd.",
    "product": "FutureNet NXR-155/C series",
    "versions": [
      {
        "version": "firmware version 5.22.5M and earlier",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Century Systems Co., Ltd.",
    "product": "FutureNet NXR-125/CX",
    "versions": [
      {
        "version": "firmware version 5.25.7H and earlier",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Century Systems Co., Ltd.",
    "product": "FutureNet NXR-120/C",
    "versions": [
      {
        "version": "firmware version 5.25.7H and earlier",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Century Systems Co., Ltd.",
    "product": "FutureNet WXR-250",
    "versions": [
      {
        "version": "firmware version 1.4.7 and earlier",
        "status": "affected"
      }
    ]
  }
]

Source	Link
centurysys	www.centurysys.co.jp/backnumber/nxr_common/20240716-01.html
centurysys	www.centurysys.co.jp/backnumber/nxr_common/20240716-03.html
jvn	www.jvn.jp/en/vu/JVNVU96424864/

21 Nov 2024 09:22Current

7.3High risk

Vulners AI Score7.3

CVSS 3.17.2 - 8.8

EPSS0.00507

SSVC

cve-2024-36475 century systems co.futurenet debug code vulnerability os command