Skip to content
OpenAdvisories

Description

FutureNet NXR series, VXR series and WXR series provided by Century Systems Co., Ltd. contain an active debug code vulnerability. If a user who knows how to use the debug function logs in to the product, the debug function may be used and an arbitrary OS command may be executed.

Affected products

VendorProductAffectedFixed
Century Systems FutureNet NXR-1300 series firmware version 7.4.9 and earlier —
Century Systems FutureNet NXR-650 firmware version 21.16.1 and earlier —
Century Systems FutureNet NXR-610X series firmware version 21.14.11 and earlier —
Century Systems FutureNet NXR-530 firmware version 21.11.13 and earlier —
Century Systems FutureNet NXR-350/C firmware version 5.30.9 and earlier —
Century Systems FutureNet NXR-230/C firmware version 5.30.12 and earlier —
Century Systems FutureNet NXR-160/LW firmware version 21.8.3 and earlier —
Century Systems FutureNet NXR-G200 series firmware version 9.12.15 and earlier —
Century Systems FutureNet NXR-G180/L-CA firmware version 21.7.28B and earlier —
Century Systems FutureNet NXR-G120 series firmware version 21.15.2 and earlier —
Century Systems FutureNet NXR-G110 series firmware version 21.7.30C and earlier —
Century Systems FutureNet NXR-G100 series firmware version 6.23.10 and earlier —
Century Systems FutureNet NXR-G060 series firmware version 21.15.5 and earlier —
Century Systems FutureNet NXR-G050 series firmware version 21.12.9 and earlier —
Century Systems FutureNet VXR/x64 firmware version 21.7.31 and earlier —
Century Systems FutureNet VXR/x86 firmware version 10.1.4 and earlier —
Century Systems FutureNet NXR-1200 firmware version 5.25.21 and earlier —
Century Systems FutureNet NXR-130/C firmware version 5.13.21 and earlier —
Century Systems FutureNet NXR-155/C series firmware version 5.22.5M and earlier —
Century Systems FutureNet NXR-125/CX firmware version 5.25.7H and earlier —
Century Systems FutureNet NXR-120/C firmware version 5.25.7H and earlier —
Century Systems FutureNet WXR-250 firmware version 1.4.7 and earlier —

References