Description (CNA)
FutureNet MA and IP-K series provided by Century Systems Co., Ltd. contain an OS command Injection vulnerability. A user who logs in to the Web UI of the product may execute an arbitrary OS command.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Century Systems Co., Ltd. / FutureNet MA-X series | affected from 6.0.0 to 6.4.1 |
| Century Systems Co., Ltd. / FutureNet MA-E300 series | affected from 5.0.0 to 6.2.1 |
| Century Systems Co., Ltd. / FutureNet MA-S series | affected from 5.0.0 to 6.4.0 |
| Century Systems Co., Ltd. / FutureNet MA-P series | affected from 5.0.0 to 6.4.0 |
| Century Systems Co., Ltd. / FutureNet IP-K series | affected from 2.0.0 to 2.2.1 |
CWE
CWE-78
References
- https://www.centurysys.co.jp/backnumber/common/jvnvu98191201.html
- https://jvn.jp/en/vu/JVNVU98191201/
ADP enrichment
No English description supplied.
No references supplied.