CVE-2024-36491: Centurysys Futurenet Nxr-120/c Firmware

Critical severity, CVSS 9.8. EPSS: 0.7% chance of exploitation in the next 30 days.

FutureNet NXR series, VXR series and WXR series provided by Century Systems Co., Ltd. allow an administrative user to execute an arbitrary OS command, obtain and/or alter sensitive information, and cause a denial-of-service (DoS) condition.

Affected products

• Centurysys Futurenet Nxr-120/c Firmware: any version
• Centurysys Futurenet Nxr-1200 Firmware: any version
• Centurysys Futurenet Nxr-125/cx Firmware: any version
• Centurysys Futurenet Nxr-130/c Firmware: any version
• Centurysys Futurenet Nxr-1300 Firmware: before 7.4.10 (fixed in 7.4.10)
• Centurysys Futurenet Nxr-155/c Firmware: any version
• Centurysys Futurenet Nxr-160/lw Firmware: before 21.8.4 (fixed in 21.8.4)
• Centurysys Futurenet Nxr-230/c Firmware: before 5.30.13 (fixed in 5.30.13)
• Centurysys Futurenet Nxr-350/c Firmware: before 5.30.9c (fixed in 5.30.9c)
• Centurysys Futurenet Nxr-530 Firmware: before 21.11.14 (fixed in 21.11.14)
• Centurysys Futurenet Nxr-610x Firmware: before 21.14.11c (fixed in 21.14.11c)
• Centurysys Futurenet Nxr-650 Firmware: before 21.16.2 (fixed in 21.16.2)
• Centurysys Futurenet Nxr-g050 Firmware: before 21.12.10 (fixed in 21.12.10)
• Centurysys Futurenet Nxr-g060 Firmware: before 21.15.6 (fixed in 21.15.6)
• Centurysys Futurenet Nxr-g100 Firmware: before 6.23.11 (fixed in 6.23.11)
• Centurysys Futurenet Nxr-g110 Firmware: before 21.7.32 (fixed in 21.7.32)
• Centurysys Futurenet Nxr-g120 Firmware: before 21.15.2c (fixed in 21.15.2c)
• Centurysys Futurenet Nxr-g180/l-Ca Firmware: before 21.7.28c (fixed in 21.7.28c)
• Centurysys Futurenet Nxr-g200 Firmware: before 9.12.16 (fixed in 9.12.16)
• Centurysys Futurenet Vxr-x64: before 21.7.32 (fixed in 21.7.32)
• Centurysys Futurenet Vxr-x86: before 10.1.5 (fixed in 10.1.5)
• Centurysys Futurenet Wxr-250 Firmware: any version

Published 2024-07-17. Last modified 2026-06-17.