CVSS 3.1
8.8 highCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HCVE-2024-36475
High (8.8) in centurysys. EPSS 0.6% chance of exploitation in the next 30 days.
FutureNet NXR series, VXR series and WXR series provided by Century Systems Co., Ltd. contain an active debug code vulnerability. If a user who knows how to use the debug function logs in to the product, the debug function may be used and an arbitrary OS command may be executed.
Severity
- EPSS
- 0.6% chance of exploitation in the next 30 days; higher than 49% of CVEs (scores of 2026-10-31)
- CWEs
- CWE-78, CWE-489
- Published
- Modified
- Record from
- the NVD, synced
Affected
- centurysys:futurenet_nxr-1200_firmware
- centurysys:futurenet_nxr-120\/c_firmware
- centurysys:futurenet_nxr-125\/cx_firmware
- centurysys:futurenet_nxr-1300_firmware
- centurysys:futurenet_nxr-130\/c_firmware
- centurysys:futurenet_nxr-155\/c_firmware
- centurysys:futurenet_nxr-160\/lw_firmware
- centurysys:futurenet_nxr-230\/c_firmware
- centurysys:futurenet_nxr-350\/c_firmware
- centurysys:futurenet_nxr-530_firmware
- centurysys:futurenet_nxr-610x_firmware
- centurysys:futurenet_nxr-650_firmware
- centurysys:futurenet_nxr-g050_firmware
- centurysys:futurenet_nxr-g060_firmware
- centurysys:futurenet_nxr-g100_firmware
- centurysys:futurenet_nxr-g110_firmware
- centurysys:futurenet_nxr-g120_firmware
- centurysys:futurenet_nxr-g180\/l-ca_firmware
- centurysys:futurenet_nxr-g200_firmware
- centurysys:futurenet_vxr-x64
- centurysys:futurenet_vxr-x86
- centurysys:futurenet_wxr-250_firmware