Centurysys Futurenet Nxr-350/c Firmware vulnerabilities

3 CVEs affecting Centurysys Futurenet Nxr-350/c Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2024-36491, published 2024-07-17.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2024-31070, published 2024-07-17. Critical severity, CVSS 9.1. EPSS: 0.8% chance of exploitation in the next 30 days. Initialization of a resource with an insecure default vulnerability in FutureNet NXR series, VXR series and WXR series provided by Century Systems Co., Ltd. allows a remote unauthenticated attacker…
CVE-2024-36491, published 2024-07-17. Critical severity, CVSS 9.8. EPSS: 0.7% chance of exploitation in the next 30 days. FutureNet NXR series, VXR series and WXR series provided by Century Systems Co., Ltd. allow an administrative user to execute an arbitrary OS command, obtain and/or alter sensitive information, and…
CVE-2024-36475, published 2024-07-17. High severity, CVSS 8.8. EPSS: 0.6% chance of exploitation in the next 30 days. FutureNet NXR series, VXR series and WXR series provided by Century Systems Co., Ltd. contain an active debug code vulnerability. If a user who knows how to use the debug function logs in to the…