PatchTheCVEnexto nx3010 firmware vulnerabilities and fixes
Recent CVEs affecting nexto nx3010 firmware, with upgrade or downgrade steps. 3 tracked.
Also searched as: nextonx3010firmware.
nexto nx3010 firmware has 3 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2021-08-23. Highest priority: CVE-2021-39244 (score 58/100).
- CVE-2021-39245 HIGH 7.5 MITIGATE MITIGATE Hardcoded .htaccess Credentials for getlogs.cgi exist on Altus Nexto, Nexto Xpress, and Hadron Xtorm devices
- CVE-2021-39244 HIGH 8.8 MITIGATE MITIGATE Authenticated Semi-Blind Command Injection (via Parameter Injection) exists on Altus Nexto, Nexto Xpress, and
- CVE-2021-39243 MEDIUM 6.5 MITIGATE MITIGATE Cross-Site Request Forgery (CSRF) exists on Altus Nexto, Nexto Xpress, and Hadron Xtorm devices via any CGI en
FAQ
How do I fix nexto nx3010 firmware vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is nexto nx3010 firmware being exploited right now?
None of the tracked nexto nx3010 firmware CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which nexto nx3010 firmware CVE should I patch first?
CVE-2021-39244 currently ranks highest (58/100): Authenticated Semi-Blind Command Injection (via Parameter Injection) exists on Altus Nexto, Nexto Xpress, and .