FutureNet MA and IP-K series devices from Century Systems Co., Ltd. have an OS command injection vulnerability. This flaw allows a user with login access to the Web UI to execute arbitrary operating system commands. The vulnerability has a high severity rating with a CVSS score of 7.2. No affected versions or patch information is currently provided.