Century Systems Co., Ltd. FutureNet NXR-G060 series

• CVE-2025-30485 Medium 6.2 UNIX symbolic link (Symlink) following issue exists in FutureNet NXR series, VXR series and WXR series routers. Attaching to the affected product an external storage containing malicious symbolic link 0.3%
• CVE-2024-50357 Critical 9.8 FutureNet NXR series routers provided by Century Systems Co., Ltd. have REST-APIs, which are configured as disabled in the initial (factory default) configuration. But, REST-APIs are unexpectedly enab 0.6%
• CVE-2024-36491 Critical 9.8 FutureNet NXR series, VXR series and WXR series provided by Century Systems Co., Ltd. allow an administrative user to execute an arbitrary OS command, obtain and/or alter sensitive information, and ca 0.7%
• CVE-2024-36475 High 7.2 FutureNet NXR series, VXR series and WXR series provided by Century Systems Co., Ltd. contain an active debug code vulnerability. If a user who knows how to use the debug function logs in to the produ 0.6%
• CVE-2024-31070 Critical 9.1 Initialization of a resource with an insecure default vulnerability in FutureNet NXR series, VXR series and WXR series provided by Century Systems Co., Ltd. allows a remote unauthenticated attacker to 0.8%