https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T23:47:21.619444+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2024-50357 CVE-2024-50357 2026-10-06T23:47:21.621453+00:00

Affected: Century Systems Co., Ltd. FutureNet NXR-G110 series, Century Systems Co., Ltd. FutureNet NXR-G060 series, Century Systems Co., Ltd. FutureNet NXR-G050 series, centurysys futurenet_nxr-g110_firmware, centurysys futurenet_nxr-g060_firmware, centurysys futurenet_nxr-g050_firmware

FutureNet NXR series routers provided by Century Systems Co., Ltd. have REST-APIs, which are configured as disabled in the initial (factory default) configuration. But, REST-APIs are unexpectedly enabled when the affected product is powered up, provided either http-server (GUI) or Web authentication is enabled. The factory default configuration makes http-server (GUI) enabled, which means REST-APIs are also enabled. The username and the password for REST-APIs are configured in the factory default configuration. As a result, an attacker may obtain and/or alter the affected product's settings via REST-APIs.