PatchTheCVEaltus vulnerabilities
Recent CVEs affecting altus products. 3 tracked.
altus has 3 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2021-08-23. Highest priority: CVE-2021-39244 (score 58/100).
- CVE-2021-39245 HIGH 7.5 MITIGATE MITIGATE Hardcoded .htaccess Credentials for getlogs.cgi exist on Altus Nexto, Nexto Xpress, and Hadron Xtorm devices
- CVE-2021-39244 HIGH 8.8 MITIGATE MITIGATE Authenticated Semi-Blind Command Injection (via Parameter Injection) exists on Altus Nexto, Nexto Xpress, and
- CVE-2021-39243 MEDIUM 6.5 MITIGATE MITIGATE Cross-Site Request Forgery (CSRF) exists on Altus Nexto, Nexto Xpress, and Hadron Xtorm devices via any CGI en
FAQ
How do I fix altus vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is altus being exploited right now?
None of the tracked altus CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which altus CVE should I patch first?
CVE-2021-39244 currently ranks highest (58/100): Authenticated Semi-Blind Command Injection (via Parameter Injection) exists on Altus Nexto, Nexto Xpress, and .