https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 05 Oct 2026 01:43:31 +0000 https://cve.radiocsirt.org/vuln/bdu:2024-09395 bdu:2024-09395 https://cve.radiocsirt.org/vuln/bdu:2024-09395 https://cve.radiocsirt.org/vuln/euvd-2026-205340 EUVD-2026-205340 https://cve.radiocsirt.org/vuln/euvd-2026-205340 https://cve.radiocsirt.org/vuln/fkie_cve-2024-50357 <p>FutureNet NXR series routers provided by Century Systems Co., Ltd. have REST-APIs, which are configured as disabled in the initial (factory default) configuration. But, REST-APIs are unexpectedly enabled when the affected product is powered up, provided either http-server (GUI) or Web authentication is enabled. The factory default configuration makes http-server (GUI) enabled, which means REST-APIs are also enabled. The username and the password for REST-APIs are configured in the factory default configuration. As a result, an attacker may obtain and/or alter the affected product&#39;s settings via REST-APIs.</p> <p>FutureNet NXR series routers provided by Century Systems Co., Ltd. have REST-APIs, which are configured as disabled in the initial (factory default) configuration. But, REST-APIs are unexpectedly enabled when the affected product is powered up, provided either http-server (GUI) or Web authentication is enabled. The factory default configuration makes http-server (GUI) enabled, which means REST-APIs are also enabled. The username and the password for REST-APIs are configured in the factory default configuration. As a result, an attacker may obtain and/or alter the affected product&#39;s settings via REST-APIs.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2024-50357 https://cve.radiocsirt.org/vuln/ghsa-g6j3-5m8r-7p3c <p>FutureNet NXR series routers provided by Century Systems Co., Ltd. have REST-APIs, which are configured as disabled in the initial (factory default) configuration. But, REST-APIs are unexpectedly enabled when the affected product is powered up, provided either http-server (GUI) or Web authentication is enabled. The factory default configuration makes http-server (GUI) enabled, which means REST-APIs are also enabled. The username and the password for REST-APIs are configured in the factory default configuration. As a result, an attacker may obtain and/or alter the affected product&#39;s settings via REST-APIs.</p> <p>FutureNet NXR series routers provided by Century Systems Co., Ltd. have REST-APIs, which are configured as disabled in the initial (factory default) configuration. But, REST-APIs are unexpectedly enabled when the affected product is powered up, provided either http-server (GUI) or Web authentication is enabled. The factory default configuration makes http-server (GUI) enabled, which means REST-APIs are also enabled. The username and the password for REST-APIs are configured in the factory default configuration. As a result, an attacker may obtain and/or alter the affected product&#39;s settings via REST-APIs.</p> https://cve.radiocsirt.org/vuln/ghsa-g6j3-5m8r-7p3c https://cve.radiocsirt.org/vuln/jvndb-2024-011744 <p>FutureNet NXR series routers provided by Century Systems Co., Ltd. have REST-APIs, which are configured as disabled in the initial (factory default) configuration. But, REST-APIs are unexpectedly enabled when the affected product is powered up, provided either http-server (GUI) or Web authentication is enabled (CWE-684). The factory default configuration makes http-server (GUI) enabled, which means REST-APIs are also enabled. The username and the password for REST-APIs are configured in the factory default configuration. Century Systems Co., Ltd. reported this vulnerability to JPCERT/CC to notify users of its solution through JVN.</p> <p>FutureNet NXR series routers provided by Century Systems Co., Ltd. have REST-APIs, which are configured as disabled in the initial (factory default) configuration. But, REST-APIs are unexpectedly enabled when the affected product is powered up, provided either http-server (GUI) or Web authentication is enabled (CWE-684). The factory default configuration makes http-server (GUI) enabled, which means REST-APIs are also enabled. The username and the password for REST-APIs are configured in the factory default configuration. Century Systems Co., Ltd. reported this vulnerability to JPCERT/CC to notify users of its solution through JVN.</p> https://cve.radiocsirt.org/vuln/jvndb-2024-011744