VDB
BDU%3A2024-05855
BDU%3A2024-05855
PUBLISHED
CVSS 10 CRITICAL
Уязвимость микропрограммного обеспечения маршрутизаторов FutureNet NXR, FutureNet VXR и FutureNet WXR, связанная с непринятием мер по нейтрализации специальных элементов, используемых в команде операционной системы, позволяющая нарушителю получить несанкционированный доступ к защищаемой информации, выполнить произвольные команды или вызвать отказ в обслуживании
Risk Scores
CVSS 2.0
10
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Century Systems Co., Ltd. | FutureNet VXR/x86 | firmware version 10.1.4 and earlier |
| Century Systems Co., Ltd. | FutureNet NXR-G050 series | firmware version 21.12.9 and earlier |
| centurysys | futurenet_nxr-120\/c_firmware | 0 |
| Century Systems Co., Ltd. | FutureNet NXR-160/LW | firmware version 21.8.3 and earlier |
| Century Systems Co., Ltd. | FutureNet VXR/x64 | firmware version 21.7.31 and earlier |
| centurysys | futurenet_nxr-130\/c_firmware | 0 |
| Century Systems Co., Ltd. | FutureNet NXR-G100 series | firmware version 6.23.10 and earlier |
| centurysys | futurenet_nxr-610x_firmware | 0 |
| centurysys | futurenet_nxr-g050_firmware | 0 |
| centurysys | futurenet_nxr-530_firmware | 0 |
| centurysys | futurenet_nxr-650_firmware | 0 |
| centurysys | futurenet_nxr-155\/c_firmware | 0 |
| centurysys | futurenet_nxr-g100_firmware | 0 |
| centurysys | futurenet_nxr-160\/lw_firmware | 0 |
| centurysys | futurenet_nxr-g060_firmware | 0 |
| Century Systems Co., Ltd. | FutureNet NXR-G120 series | firmware version 21.15.2 and earlier |
| centurysys | futurenet_nxr-230\/c_firmware | 0 |
| Century Systems Co., Ltd. | FutureNet NXR-G180/L-CA | firmware version 21.7.28B and earlier |
| centurysys | futurenet_nxr-125\/cx_firmware | 0 |
| centurysys | futurenet_nxr-g200_firmware | 0 |
…and 25 more
Timeline
- Jul 17, 2024 CVE Published
- Jul 17, 2024 PoC Published
- Aug 6, 2024 CVE Updated
- Apr 1, 2025 PoC Published