Century Systems vulnerabilities
We track 6 vulnerabilities in Century Systems products across 40 products. 6 are rated high or critical, and none are known to be exploited. The most recent was published on October 31, 2025.
Latest Century Systems vulnerabilities
- 7.2 High severity
FutureNet MA-X series: Improper Neutralization of Special Elements used in an OS Command
FutureNet MA and IP-K series provided by Century Systems Co., Ltd. contain an OS command Injection vulnerability. A user who logs in to the Web UI of the product may execute an arbitrary OS command.
- 7.5 High severity
FutureNet AS-250/S: Authentication Bypass Using an Alternate Path or Channel
Authentication bypass vulnerability exists in FutureNet AS series (Industrial Routers) provided by Century Systems Co., Ltd. If this vulnerability is exploited, a remote unauthenticated attacker may obtain the device information such as MAC address by sending
- 9.8 Critical severity
FutureNet NXR-G110 series: Incorrect Provision of Specified Functionality
FutureNet NXR series routers provided by Century Systems Co., Ltd. have REST-APIs, which are configured as disabled in the initial (factory default) configuration. But, REST-APIs are unexpectedly enabled when the affected product is powered up, provided either
- 9.8 Critical severity
FutureNet NXR-1300 series: Improper Neutralization of Special Elements used in an OS Command
FutureNet NXR series, VXR series and WXR series provided by Century Systems Co., Ltd. allow an administrative user to execute an arbitrary OS command, obtain and/or alter sensitive information, and cause a denial-of-service (DoS) condition.
- 8.8 High severity
FutureNet NXR-1300 series: Improper Neutralization of Special Elements used in an OS Command
FutureNet NXR series, VXR series and WXR series provided by Century Systems Co., Ltd. contain an active debug code vulnerability. If a user who knows how to use the debug function logs in to the product, the debug function may be used and an arbitrary OS comma
- 9.1 Critical severity
FutureNet NXR-1300 series: Initialization of a Resource with an Insecure Default
Initialization of a resource with an insecure default vulnerability in FutureNet NXR series, VXR series and WXR series provided by Century Systems Co., Ltd. allows a remote unauthenticated attacker to access telnet service unlimitedly.