CVE-2021-39243 Cross-site request forgery in n/a
Attackers can perform unauthorized actions on Altus PLCs via CSRF, potentially compromising industrial control systems.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- A user has to click or open something
- Fix
- None listed
What is CVE-2021-39243?
CVE-2021-39243 is a medium-severity vulnerability in n/a, published on 23 Aug 2021. An attacker can exploit it over the internet without logging in, and only if a user opens a file or follows a link.
Official description
Cross-Site Request Forgery (CSRF) exists on Altus Nexto, Nexto Xpress, and Hadron Xtorm devices via any CGI endpoint. This affects Nexto NX3003 1.8.11.0, Nexto NX3004 1.8.11.0, Nexto NX3005 1.8.11.0, Nexto NX3010 1.8.3.0, Nexto NX3020 1.8.3.0, Nexto NX3030 1.8.3.0, Nexto NX5100 1.8.11.0, Nexto NX5101 1.8.11.0, Nexto NX5110 1.1.2.8, Nexto NX5210 1.1.2.8, Nexto Xpress XP300 1.8.11.0, Nexto Xpress XP315 1.8.11.0, Nexto Xpress XP325 1.8.11.0, Nexto Xpress XP340 1.8.11.0, and Hadron Xtorm HX3040 1.7.58.0.
Weakness: CWE-352
Which versions are affected by CVE-2021-39243?
It affects 15 products.
Products include Altus Hadron Xtorm Hx3040 Firmware, Altus Nexto Nx3003 Firmware, Altus Nexto Nx3004 Firmware, Altus Nexto Nx3005 Firmware, Altus Nexto Nx3010 Firmware, Altus Nexto Nx3020 Firmware and 9 more.
How do I fix CVE-2021-39243?
No fix has been published for CVE-2021-39243 yet. Limit exposure of the affected software until one is available.
Is CVE-2021-39243 being exploited?
There is no known exploitation of CVE-2021-39243 in the wild and no public exploit code.
Other vulnerabilities in n/a
Sources
Also known as GHSA-grc5-g2g9-cc7h.