CVE-2024-50357: Century Systems Co., Ltd. FutureNet NXR-G110 series vulnerability
Century Systems Co., Ltd. · FutureNet NXR-G110 series
Affected: Century Systems Co., Ltd. FutureNet NXR-G110 series · Exploitation: unlikely (under 1%)
Not in CyberSIXT coverage yet: no article names this CVE. This page shows the public record.
Higher than 46% of scored CVEs
DescriptionCVE.org
FutureNet NXR series routers provided by Century Systems Co., Ltd. have REST-APIs, which are configured as disabled in the initial (factory default) configuration. But, REST-APIs are unexpectedly enabled when the affected product is powered up, provided either http-server (GUI) or Web authentication is enabled. The factory default configuration makes http-server (GUI) enabled, which means REST-APIs are also enabled. The username and the password for REST-APIs are configured in the factory default configuration. As a result, an attacker may obtain and/or alter the affected product's settings via REST-APIs.
Affected products3
From the CVE record. A product or version that is not listed is unknown, not unaffected.
- Century Systems Co., Ltd. · FutureNet NXR-G110 seriesfirmware versions 21.15.7 and later but prior to 21.15.9
- Century Systems Co., Ltd. · FutureNet NXR-G060 seriesfirmware versions prior to 21.15.6C1
- Century Systems Co., Ltd. · FutureNet NXR-G050 seriesfirmware versions 21.12.5 and later but prior to 21.12.11
On the Atlas
Every published CVE is on the CyberSIXT Atlas, grouped by weakness, vendor and month.
- Exploitation
- Unlikely (under 1%). EPSS under 1%, or no score yet.
- CISA KEV
- Not listed
- Public check
- No public nuclei template
- Published
- November 2024
CoverageNo articles yet
No CyberSIXT article names CVE-2024-50357 yet, so there is no coverage timeline, action brief or change log for it. Everything on this page comes from the public CVE record, CISA KEV, EPSS and the nuclei template index. Search the archive or see the CVEs in the news.