CVE-2021-39243

MITRE NVD CVE.ORG Print: PDF PDF

Summary

CVECVE-2021-39243
StatePUBLIC
Assigner[email protected]
Source PriorityCVE Program / NVD first with legacy fallback
Published2021-08-23 05:15:00 UTC
Updated2021-08-26 18:37:00 UTC
DescriptionCross-Site Request Forgery (CSRF) exists on Altus Nexto, Nexto Xpress, and Hadron Xtorm devices via any CGI endpoint. This affects Nexto NX3003 1.8.11.0, Nexto NX3004 1.8.11.0, Nexto NX3005 1.8.11.0, Nexto NX3010 1.8.3.0, Nexto NX3020 1.8.3.0, Nexto NX3030 1.8.3.0, Nexto NX5100 1.8.11.0, Nexto NX5101 1.8.11.0, Nexto NX5110 1.1.2.8, Nexto NX5210 1.1.2.8, Nexto Xpress XP300 1.8.11.0, Nexto Xpress XP315 1.8.11.0, Nexto Xpress XP325 1.8.11.0, Nexto Xpress XP340 1.8.11.0, and Hadron Xtorm HX3040 1.7.58.0.

Risk And Classification

Problem Types: CWE-352

NVD Known Affected Configurations (CPE 2.3)

TypeVendorProductVersionUpdateEditionLanguage
Hardware Altus Hadron Xtorm Hx3040 - All All All
Operating System Altus Hadron Xtorm Hx3040 Firmware 1.7.58.0 All All All
Hardware Altus Nexto Nx3003 - All All All
Operating System Altus Nexto Nx3003 Firmware 1.8.11.0 All All All
Hardware Altus Nexto Nx3004 - All All All
Operating System Altus Nexto Nx3004 Firmware 1.8.11.0 All All All
Hardware Altus Nexto Nx3005 - All All All
Operating System Altus Nexto Nx3005 Firmware 1.8.11.0 All All All
Hardware Altus Nexto Nx3010 - All All All
Operating System Altus Nexto Nx3010 Firmware 1.8.3.0 All All All
Hardware Altus Nexto Nx3020 - All All All
Operating System Altus Nexto Nx3020 Firmware 1.8.3.0 All All All
Hardware Altus Nexto Nx3030 - All All All
Operating System Altus Nexto Nx3030 Firmware 1.8.3.0 All All All
Hardware Altus Nexto Nx5100 - All All All
Operating System Altus Nexto Nx5100 Firmware 1.8.11.0 All All All
Hardware Altus Nexto Nx5101 - All All All
Operating System Altus Nexto Nx5101 Firmware 1.8.11.0 All All All
Hardware Altus Nexto Nx5110 - All All All
Operating System Altus Nexto Nx5110 Firmware 1.1.2.8 All All All
Hardware Altus Nexto Nx5210 - All All All
Operating System Altus Nexto Nx5210 Firmware 1.1.2.8 All All All
Hardware Altus Nexto Xpress Xp300 - All All All
Operating System Altus Nexto Xpress Xp300 Firmware 1.8.11.0 All All All
Hardware Altus Nexto Xpress Xp315 - All All All
Operating System Altus Nexto Xpress Xp315 Firmware 1.8.11.0 All All All
Hardware Altus Nexto Xpress Xp325 - All All All
Operating System Altus Nexto Xpress Xp325 Firmware 1.8.11.0 All All All
Hardware Altus Nexto Xpress Xp340 - All All All
Operating System Altus Nexto Xpress Xp340 Firmware 1.8.11.0 All All All

References

ReferenceSourceLinkTags
Full Disclosure: SEC Consult SA-20210819-0 :: Multiple critical vulnerabilities in Altus Nexto and Hadron series MISC seclists.org
Altus Sistemas de Automação | Altus MISC www.altus.com.br
CVE Program record CVE.ORG www.cve.org canonical
NVD vulnerability detail NVD nvd.nist.gov canonical, analysis
© CVE.report 2026 |

Use of this information constitutes acceptance for use in an AS IS condition. There are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. It is the responsibility of user to evaluate the accuracy, completeness or usefulness of any information, opinion, advice or other content. EACH USER WILL BE SOLELY RESPONSIBLE FOR ANY consequences of his or her direct or indirect use of this web site. ALL WARRANTIES OF ANY KIND ARE EXPRESSLY DISCLAIMED. This site will NOT BE LIABLE FOR ANY DIRECT, INDIRECT or any other kind of loss.

CVE, CWE, and OVAL are registred trademarks of The MITRE Corporation and the authoritative source of CVE content is MITRE's CVE web site. This site includes MITRE data granted under the following license.

CVE.report and Source URL Uptime Status status.cve.report