Centurysys Futurenet Nxr-1300 Firmware vulnerabilities

CVE-2024-31070 [CRITICAL] CWE-1188 CVE-2024-31070: Initialization of a resource with an insecure default vulnerability in FutureNet NXR series, VXR ser Initialization of a resource with an insecure default vulnerability in FutureNet NXR series, VXR series and WXR series provided by Century Systems Co., Ltd. allows a remote unauthenticated attacker to access telnet service unlimitedly.

CVE-2024-36475 [HIGH] CWE-78 CVE-2024-36475: FutureNet NXR series, VXR series and WXR series provided by Century Systems Co., Ltd. contain an act FutureNet NXR series, VXR series and WXR series provided by Century Systems Co., Ltd. contain an active debug code vulnerability. If a user who knows how to use the debug function logs in to the product, the debug function may be used and an arbitrary OS command may be executed.

CVE-2024-36491 [CRITICAL] CWE-78 CVE-2024-36491: FutureNet NXR series, VXR series and WXR series provided by Century Systems Co., Ltd. allow an admin FutureNet NXR series, VXR series and WXR series provided by Century Systems Co., Ltd. allow an administrative user to execute an arbitrary OS command, obtain and/or alter sensitive information, and cause a denial-of-service (DoS) condition.