CVE-2021-39244

published 2021-08-23

CVE-2021-39244: Authenticated Semi-Blind Command Injection (via Parameter Injection) exists on Altus Nexto, Nexto Xpress, and Hadron Xtorm devices via the getlogs.cgi tcpdump…

Priority P2 59 high 8.8 CVSS 3.1

AV N AC L PR L UI N S U C H I H A H

Authenticated Semi-Blind Command Injection (via Parameter Injection) exists on Altus Nexto, Nexto Xpress, and Hadron Xtorm devices via the getlogs.cgi tcpdump feature. This affects Nexto NX3003 1.8.11.0, Nexto NX3004 1.8.11.0, Nexto NX3005 1.8.11.0, Nexto NX3010 1.8.3.0, Nexto NX3020 1.8.3.0, Nexto NX3030 1.8.3.0, Nexto NX5100 1.8.11.0, Nexto NX5101 1.8.11.0, Nexto NX5110 1.1.2.8, Nexto NX5210 1.1.2.8, Nexto Xpress XP300 1.8.11.0, Nexto Xpress XP315 1.8.11.0, Nexto Xpress XP325 1.8.11.0, Nexto Xpress XP340 1.8.11.0, and Hadron Xtorm HX3040 1.7.58.0.

Affected

15 ranges

Vendor	Product	Version range	Fixed in
altus	hadron_xtorm_hx3040_firmware	—	—
altus	nexto_nx3003_firmware	—	—
altus	nexto_nx3004_firmware	—	—
altus	nexto_nx3005_firmware	—	—
altus	nexto_nx3010_firmware	—	—
altus	nexto_nx3020_firmware	—	—
altus	nexto_nx3030_firmware	—	—
altus	nexto_nx5100_firmware	—	—
altus	nexto_nx5101_firmware	—	—
altus	nexto_nx5110_firmware	—	—
altus	nexto_nx5210_firmware	—	—
altus	nexto_xpress_xp300_firmware	—	—
altus	nexto_xpress_xp315_firmware	—	—
altus	nexto_xpress_xp325_firmware	—	—
altus	nexto_xpress_xp340_firmware	—	—

CVSS provenance

nvd v3.1 8.8 HIGH CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

nvd v2.0 9.0 CRITICAL AV:N/AC:L/Au:S/C:C/I:C/A:C

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-78