Possible Remote Attack Vulnerabilities in FutureNet NXR, VXR, and WXR Series Devices

CVE-2024-36491

What is CVE-2024-36491?

A vulnerability in the FutureNet NXR, VXR, and WXR series products from Century Systems Co., Ltd. allows an unauthenticated remote attacker to execute arbitrary operating system commands. This flaw enables the attacker to access and potentially alter sensitive information stored on the affected devices. Moreover, it presents opportunities for attackers to induce a denial of service condition, disrupting the normal functionality of the impacted systems. Organizations utilizing these products should implement security measures and patches to mitigate exposure to this vulnerability.

References