CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

3 matches found

NVD•added 2021/08/23 5:15 a.m.•21 views

CVE-2021-39245

Hardcoded .htaccess Credentials for getlogs.cgi exist on Altus Nexto, Nexto Xpress, and Hadron Xtorm devices. This affects Nexto NX3003 1.8.11.0, Nexto NX3004 1.8.11.0, Nexto NX3005 1.8.11.0, Nexto NX3010 1.8.3.0, Nexto NX3020 1.8.3.0, Nexto NX3030 1.8.3.0, Nexto NX5100 1.8.11.0, Nexto NX5101...

7.5CVSS0.01346EPSS

Exploits3References2

CVE•added 2021/08/23 4:27 a.m.•99 views

CVE-2021-39245

CVE-2021-39245 affects Altus Nexto/NX and Hadron Xtorm devices (e.g., Nexto NX3003/3004/3005/3010/3020/3030, NX5100/5101, NX5110, NX5210, Nexto Xpress XP300/315/325/340, Hadron Xtorm HX3040) with 1.7.58.0–1.8.11.0 firmware. Root cause: hardcoded .htaccess credentials for getlogs.cgi enable unauth...

7.5CVSS8.1AI score0.01346EPSS

Exploits3References2Affected Software1