Lucene search

JpcertVULNRICHMENT:CVE-2024-36491

HistoryJul 17, 2024 - 8:50 a.m.

CVE-2024-36491

2024-07-1708:50:11

jpcert

github.com

futurenet

century systems

remote execution

AI Score

7.7

Confidence

High

EPSS

0.001

Percentile

16.3%

SSVC

Exploitation

none

Automatable

yes

Technical Impact

total

JSON

FutureNet NXR series, VXR series and WXR series provided by Century Systems Co., Ltd. allow a remote unauthenticated attacker to execute an arbitrary OS command, obtain and/or alter sensitive information, and be able to cause a denial of service (DoS) condition.

CNA Affected

[
  {
    "vendor": "Century Systems Co., Ltd.",
    "product": "FutureNet NXR-1300 series",
    "versions": [
      {
        "status": "affected",
        "version": "firmware version 7.4.9 and earlier"
      }
    ]
  },
  {
    "vendor": "Century Systems Co., Ltd.",
    "product": "FutureNet NXR-650",
    "versions": [
      {
        "status": "affected",
        "version": "firmware version 21.16.1 and earlier"
      }
    ]
  },
  {
    "vendor": "Century Systems Co., Ltd.",
    "product": "FutureNet NXR-610X series",
    "versions": [
      {
        "status": "affected",
        "version": "firmware version 21.14.11 and earlier"
      }
    ]
  },
  {
    "vendor": "Century Systems Co., Ltd.",
    "product": "FutureNet NXR-530",
    "versions": [
      {
        "status": "affected",
        "version": "firmware version 21.11.13 and earlier"
      }
    ]
  },
  {
    "vendor": "Century Systems Co., Ltd.",
    "product": "FutureNet NXR-350/C",
    "versions": [
      {
        "status": "affected",
        "version": "firmware version 5.30.9 and earlier"
      }
    ]
  },
  {
    "vendor": "Century Systems Co., Ltd.",
    "product": "FutureNet NXR-230/C",
    "versions": [
      {
        "status": "affected",
        "version": "firmware version 5.30.12 and earlier"
      }
    ]
  },
  {
    "vendor": "Century Systems Co., Ltd.",
    "product": "FutureNet NXR-160/LW",
    "versions": [
      {
        "status": "affected",
        "version": "firmware version 21.8.3 and earlier"
      }
    ]
  },
  {
    "vendor": "Century Systems Co., Ltd.",
    "product": "FutureNet NXR-G200 series",
    "versions": [
      {
        "status": "affected",
        "version": "firmware version 9.12.15 and earlier"
      }
    ]
  },
  {
    "vendor": "Century Systems Co., Ltd.",
    "product": "FutureNet NXR-G180/L-CA",
    "versions": [
      {
        "status": "affected",
        "version": "firmware version 21.7.28B and earlier"
      }
    ]
  },
  {
    "vendor": "Century Systems Co., Ltd.",
    "product": "FutureNet NXR-G120 series",
    "versions": [
      {
        "status": "affected",
        "version": "firmware version 21.15.2 and earlier"
      }
    ]
  },
  {
    "vendor": "Century Systems Co., Ltd.",
    "product": "FutureNet NXR-G110 series",
    "versions": [
      {
        "status": "affected",
        "version": "firmware version 21.7.30C and earlier"
      }
    ]
  },
  {
    "vendor": "Century Systems Co., Ltd.",
    "product": "FutureNet NXR-G100 series",
    "versions": [
      {
        "status": "affected",
        "version": "firmware version 6.23.10 and earlier"
      }
    ]
  },
  {
    "vendor": "Century Systems Co., Ltd.",
    "product": "FutureNet NXR-G060 series",
    "versions": [
      {
        "status": "affected",
        "version": "firmware version 21.15.5 and earlier"
      }
    ]
  },
  {
    "vendor": "Century Systems Co., Ltd.",
    "product": "FutureNet NXR-G050 series",
    "versions": [
      {
        "status": "affected",
        "version": "firmware version 21.12.9 and earlier"
      }
    ]
  },
  {
    "vendor": "Century Systems Co., Ltd.",
    "product": "FutureNet VXR/x64",
    "versions": [
      {
        "status": "affected",
        "version": "firmware version 21.7.31 and earlier"
      }
    ]
  },
  {
    "vendor": "Century Systems Co., Ltd.",
    "product": "FutureNet VXR/x86",
    "versions": [
      {
        "status": "affected",
        "version": "firmware version 10.1.4 and earlier"
      }
    ]
  },
  {
    "vendor": "Century Systems Co., Ltd.",
    "product": "FutureNet NXR-1200",
    "versions": [
      {
        "status": "affected",
        "version": "firmware version 5.25.21 and earlier"
      }
    ]
  },
  {
    "vendor": "Century Systems Co., Ltd.",
    "product": "FutureNet NXR-130/C",
    "versions": [
      {
        "status": "affected",
        "version": "firmware version 5.13.21 and earlier"
      }
    ]
  },
  {
    "vendor": "Century Systems Co., Ltd.",
    "product": "FutureNet NXR-155/C series",
    "versions": [
      {
        "status": "affected",
        "version": "firmware version 5.22.5M and earlier"
      }
    ]
  },
  {
    "vendor": "Century Systems Co., Ltd.",
    "product": "FutureNet NXR-125/CX",
    "versions": [
      {
        "status": "affected",
        "version": "firmware version 5.25.7H and earlier"
      }
    ]
  },
  {
    "vendor": "Century Systems Co., Ltd.",
    "product": "FutureNet NXR-120/C",
    "versions": [
      {
        "status": "affected",
        "version": "firmware version 5.25.7H and earlier"
      }
    ]
  },
  {
    "vendor": "Century Systems Co., Ltd.",
    "product": "FutureNet WXR-250",
    "versions": [
      {
        "status": "affected",
        "version": "firmware version 1.4.7 and earlier"
      }
    ]
  }
]

ADP Affected

[
  {
    "cpes": [
      "cpe:2.3:o:centurysys:futurenet_nxr-1300_firmware:*:*:*:*:*:*:*:*"
    ],
    "vendor": "centurysys",
    "product": "futurenet_nxr-1300_firmware",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "versionType": "custom",
        "lessThanOrEqual": "7.4.9"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "cpes": [
      "cpe:2.3:o:centurysys:futurenet_nxr-650_firmware:*:*:*:*:*:*:*:*"
    ],
    "vendor": "centurysys",
    "product": "futurenet_nxr-650_firmware",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "versionType": "custom",
        "lessThanOrEqual": "21.16.1"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "cpes": [
      "cpe:2.3:o:centurysys:futurenet_nxr-610x_firmware:*:*:*:*:*:*:*:*"
    ],
    "vendor": "centurysys",
    "product": "futurenet_nxr-610x_firmware",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "versionType": "custom",
        "lessThanOrEqual": "21.14.11"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "cpes": [
      "cpe:2.3:o:centurysys:futurenet_nxr-530_firmware:*:*:*:*:*:*:*:*"
    ],
    "vendor": "centurysys",
    "product": "futurenet_nxr-530_firmware",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "versionType": "custom",
        "lessThanOrEqual": "21.11.13"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "cpes": [
      "cpe:2.3:o:centurysys:futurenet_nxr-350\\/c_firmware:*:*:*:*:*:*:*:*"
    ],
    "vendor": "centurysys",
    "product": "futurenet_nxr-350\\/c_firmware",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "versionType": "custom",
        "lessThanOrEqual": "5.30.9"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "cpes": [
      "cpe:2.3:o:centurysys:futurenet_nxr-230\\/c_firmware:*:*:*:*:*:*:*:*"
    ],
    "vendor": "centurysys",
    "product": "futurenet_nxr-230\\/c_firmware",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "versionType": "custom",
        "lessThanOrEqual": "5.30.12"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "cpes": [
      "cpe:2.3:o:centurysys:futurenet_nxr-160\\/lw_firmware:*:*:*:*:*:*:*:*"
    ],
    "vendor": "centurysys",
    "product": "futurenet_nxr-160\\/lw_firmware",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "versionType": "custom",
        "lessThanOrEqual": "21.8.3"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "cpes": [
      "cpe:2.3:o:centurysys:futurenet_nxr-g200_firmware:*:*:*:*:*:*:*:*"
    ],
    "vendor": "centurysys",
    "product": "futurenet_nxr-g200_firmware",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "versionType": "custom",
        "lessThanOrEqual": "9.12.15"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "cpes": [
      "cpe:2.3:o:centurysys:futurenet_nxr-g180\\/l-ca_firmware:*:*:*:*:*:*:*:*"
    ],
    "vendor": "centurysys",
    "product": "futurenet_nxr-g180\\/l-ca_firmware",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "versionType": "custom",
        "lessThanOrEqual": "21.7.28B"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "cpes": [
      "cpe:2.3:o:centurysys:futurenet_nxr-g120_firmware:*:*:*:*:*:*:*:*"
    ],
    "vendor": "centurysys",
    "product": "futurenet_nxr-g120_firmware",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "versionType": "custom",
        "lessThanOrEqual": "21.15.2"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "cpes": [
      "cpe:2.3:o:centurysys:futurenet_nxr-g110_firmware:*:*:*:*:*:*:*:*"
    ],
    "vendor": "centurysys",
    "product": "futurenet_nxr-g110_firmware",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "versionType": "custom",
        "lessThanOrEqual": "21.7.30C"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "cpes": [
      "cpe:2.3:o:centurysys:futurenet_nxr-g100_firmware:*:*:*:*:*:*:*:*"
    ],
    "vendor": "centurysys",
    "product": "futurenet_nxr-g100_firmware",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "versionType": "custom",
        "lessThanOrEqual": "6.23.10"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "cpes": [
      "cpe:2.3:o:centurysys:futurenet_nxr-g060_firmware:*:*:*:*:*:*:*:*"
    ],
    "vendor": "centurysys",
    "product": "futurenet_nxr-g060_firmware",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "versionType": "custom",
        "lessThanOrEqual": "21.15.5"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "cpes": [
      "cpe:2.3:o:centurysys:futurenet_nxr-g050_firmware:*:*:*:*:*:*:*:*"
    ],
    "vendor": "centurysys",
    "product": "futurenet_nxr-g050_firmware",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "versionType": "custom",
        "lessThanOrEqual": "21.12.9"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "cpes": [
      "cpe:2.3:o:centurysys:futurenet_vxr\\/x64_firmware:*:*:*:*:*:*:*:*"
    ],
    "vendor": "centurysys",
    "product": "futurenet_vxr\\/x64_firmware",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "versionType": "custom",
        "lessThanOrEqual": "21.7.31"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "cpes": [
      "cpe:2.3:o:centurysys:futurenet_vxr\\/x86_firmware:*:*:*:*:*:*:*:*"
    ],
    "vendor": "centurysys",
    "product": "futurenet_vxr\\/x86_firmware",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "versionType": "custom",
        "lessThanOrEqual": "10.1.4"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "cpes": [
      "cpe:2.3:o:centurysys:futurenet_nxr-1200_firmware:*:*:*:*:*:*:*:*"
    ],
    "vendor": "centurysys",
    "product": "futurenet_nxr-1200_firmware",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "versionType": "custom",
        "lessThanOrEqual": "5.25.21"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "cpes": [
      "cpe:2.3:o:centurysys:futurenet_nxr-130\\/c_firmware:*:*:*:*:*:*:*:*"
    ],
    "vendor": "centurysys",
    "product": "futurenet_nxr-130\\/c_firmware",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "versionType": "custom",
        "lessThanOrEqual": "5.13.21"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "cpes": [
      "cpe:2.3:o:centurysys:futurenet_nxr-155\\/c_firmware:*:*:*:*:*:*:*:*"
    ],
    "vendor": "centurysys",
    "product": "futurenet_nxr-155\\/c_firmware",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "versionType": "custom",
        "lessThanOrEqual": "5.22.5M"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "cpes": [
      "cpe:2.3:o:centurysys:futurenet_nxr-125\\/cx_firmware:*:*:*:*:*:*:*:*"
    ],
    "vendor": "centurysys",
    "product": "futurenet_nxr-125\\/cx_firmware",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "versionType": "custom",
        "lessThanOrEqual": "5.25.7H"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "cpes": [
      "cpe:2.3:o:centurysys:futurenet_nxr-120\\/c_firmware:*:*:*:*:*:*:*:*"
    ],
    "vendor": "centurysys",
    "product": "futurenet_nxr-120\\/c_firmware",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "versionType": "custom",
        "lessThanOrEqual": "5.25.7H"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "cpes": [
      "cpe:2.3:o:centurysys:futurenet_wxr-250_firmware:*:*:*:*:*:*:*:*"
    ],
    "vendor": "centurysys",
    "product": "futurenet_wxr-250_firmware",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "versionType": "custom",
        "lessThanOrEqual": "1.4.7"
      }
    ],
    "defaultStatus": "unknown"
  }
]

References

jvn.jp/en/vu/JVNVU96424864/

www.centurysys.co.jp/backnumber/nxr_common/20240716-01.html

www.centurysys.co.jp/backnumber/nxr_common/20240716-03.html