Altus Nexto Xpress XP325 Firmware vulnerabilities

3 CVEs affecting Altus Nexto Xpress XP325 Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2021-39245, published 2021-08-23.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2021-39244, published 2021-08-23. High severity, CVSS 8.8. EPSS: 3.5% chance of exploitation in the next 30 days. Authenticated Semi-Blind Command Injection (via Parameter Injection) exists on Altus Nexto, Nexto Xpress, and Hadron Xtorm devices via the getlogs.cgi tcpdump feature. This affects Nexto NX3003…
CVE-2021-39245, published 2021-08-23. High severity, CVSS 7.5. EPSS: 1.3% chance of exploitation in the next 30 days. Hardcoded .htaccess Credentials for getlogs.cgi exist on Altus Nexto, Nexto Xpress, and Hadron Xtorm devices. This affects Nexto NX3003 1.8.11.0, Nexto NX3004 1.8.11.0, Nexto NX3005 1.8.11.0, Nexto…
CVE-2021-39243, published 2021-08-23. Medium severity, CVSS 6.5. EPSS: 0.5% chance of exploitation in the next 30 days. Cross-Site Request Forgery (CSRF) exists on Altus Nexto, Nexto Xpress, and Hadron Xtorm devices via any CGI endpoint. This affects Nexto NX3003 1.8.11.0, Nexto NX3004 1.8.11.0, Nexto NX3005 1.8.11.0,…