FutureNet NXR series, VXR series and WXR series provided by Century Systems Co., Ltd. allow an administrative user to execute an arbitrary OS command, obtain and/or alter sensitive information, and cause a denial-of-service (DoS) condition.
| Type | CWE ID | Description |
|---|---|---|
| text | N/A | OS command injection |
| Version | Base score | Base severity | Vector |
|---|
| CAPEC ID | Description |
|---|
| Event | Date |
|---|
| Hyperlink | Resource |
|---|---|
| https://www.centurysys.co.jp/backnumber/nxr_common/20240716-01.html | N/A |
| https://www.centurysys.co.jp/backnumber/nxr_common/20240716-03.html | N/A |
| https://jvn.jp/en/vu/JVNVU96424864/ | N/A |
| Version | Base score | Base severity | Vector |
|---|---|---|---|
| 3.1 | 9.8 | CRITICAL | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
| CAPEC ID | Description |
|---|
| Event | Date |
|---|
| Hyperlink | Resource |
|---|
| Version | Base score | Base severity | Vector |
|---|
| CAPEC ID | Description |
|---|
| Event | Date |
|---|
| Hyperlink | Resource |
|---|---|
| https://www.centurysys.co.jp/backnumber/nxr_common/20240716-01.html | x_transferred |
| https://www.centurysys.co.jp/backnumber/nxr_common/20240716-03.html | x_transferred |
| https://jvn.jp/en/vu/JVNVU96424864/ | x_transferred |