CVE-2021-39243

CVE-2021-39243 describes a Cross-Site Request Forgery (CSRF) vulnerability in Altus_Sistemas de Automacao devices, exploitable via any CGI endpoint. Affected products and versions include Nexto NX3003/ NX3004/ NX3005 (1.8.11.0), NX3010/NX3020/NX3030 (1.8.3.0), NX5100/NX5101 (1.8.11.0), NX5110/NX5...

多款Altus Sistemas de Automacao产品操作系统操作系统命令注入漏洞

The Altus Sistemas de Automacao Nexto NX30xx, among others, is an industrial automation device from the Brazilian company Altus Sistemas de Automacao. An operating system command injection vulnerability exists in several Altus Sistemas de Automacao devices. The vulnerability stems from the tcpdum...

多款 Altus Sistemas de Automacao 产品跨站请求伪造漏洞

Altus Sistemas de Automacao Nexto NX30xx, among others, is an industrial automation device from Altus Sistemas de Automacao, a Brazilian company. A security vulnerability exists in several Altus Sistemas de Automacao products, which stems from the vulnerability of the web interface that sets all...