CVE-2025-54763

FutureNet MA and IP-K series provided by Century Systems Co., Ltd. contain an OS command Injection vulnerability. A user who logs in to the Web UI of the product may execute an arbitrary OS command.

Score

CVSS 4.0 8.6 High

Status

Deferred - vultures@jpcert.or.jp

Published

2025-10-31

Last modified

2026-10-18

Weaknesses

CWE-78

Affected products

• Futurenet Ip-k Series (Century Systems Co. Ltd.)
• Futurenet Ma-e300 Series (Century Systems Co. Ltd.)
• Futurenet Ma-p Series (Century Systems Co. Ltd.)
• Futurenet Ma-s Series (Century Systems Co. Ltd.)
• Futurenet Ma-x Series (Century Systems Co. Ltd.)

References

• https://www.centurysys.co.jp/backnumber/common/jvnvu98191201.html
• https://jvn.jp/en/vu/JVNVU98191201/