CVE-2021-39243

Cross-Site Request Forgery CSRF exists on Altus Nexto, Nexto Xpress, and Hadron Xtorm devices via any CGI endpoint. This affects Nexto NX3003 1.8.11.0, Nexto NX3004 1.8.11.0, Nexto NX3005 1.8.11.0, Nexto NX3010 1.8.3.0, Nexto NX3020 1.8.3.0, Nexto NX3030 1.8.3.0, Nexto NX5100 1.8.11.0, Nexto NX51...

CVE-2021-39243

CVE-2021-39243 describes a Cross-Site Request Forgery (CSRF) vulnerability in Altus_Sistemas de Automacao devices, exploitable via any CGI endpoint. Affected products and versions include Nexto NX3003/ NX3004/ NX3005 (1.8.11.0), NX3010/NX3020/NX3030 (1.8.3.0), NX5100/NX5101 (1.8.11.0), NX5110/NX5...