CVE:CVE-2021-39243
CNNVD:CNNVD-202108-1691
Altus Sistemas de Automacao Nexto NX30xx等都是巴西Altus Sistemas de Automacao公司的一款工业自动化设备。
多款 Altus Sistemas de Automacao 产品存在安全漏洞，该漏洞源于设置所有配置的 Web 界面易受攻击跨站请求伪造攻击。攻击者可利用该漏洞更改设置诱使受害者访问恶意网站。以下产品和版本受到影响：Altus Sistemas de Automacao Nexto NX30xx,Altus Sistemas de Automacao Nexto NX5xxx,Altus Sistemas de Automacao Nexto Xpress XP3xx,Altus Sistemas de Automacao Hadron Xtorm HX3040
solution:Upgrade altus nexto_nx3003_firmware to a higher version than 1.8.11.0,and avoid the version 1.8.11.0; Upgrade altus nexto_nx3004_firmware to a higher version than 1.8.11.0,and avoid the version 1.8.11.0; Upgrade altus nexto_nx3005_firmware to a higher version than 1.8.11.0,and avoid the version 1.8.11.0; Upgrade altus nexto_nx3010_firmware to a higher version than 1.8.3.0,and avoid the version 1.8.3.0; Upgrade altus nexto_nx3020_firmware to a higher version than 1.8.3.0,and avoid the version 1.8.3.0; Upgrade altus nexto_nx3030_firmware to a higher version than 1.8.3.0,and avoid the version 1.8.3.0; Upgrade altus nexto_nx5100_firmware to a higher version than 1.8.11.0,and avoid the version 1.8.11.0; Upgrade altus nexto_nx5101_firmware to a higher version than 1.8.11.0,and avoid the version 1.8.11.0; Upgrade altus nexto_nx5110_firmware to a higher version than 1.1.2.8,and avoid the version 1.1.2.8; Upgrade altus nexto_nx5210_firmware to a higher version than 1.1.2.8,and avoid the version 1.1.2.8; Upgrade altus nexto_xpress_xp300_firmware to a higher version than 1.8.11.0,and avoid the version 1.8.11.0; Upgrade altus nexto_xpress_xp315_firmware to a higher version than 1.8.11.0,and avoid the version 1.8.11.0; Upgrade altus nexto_xpress_xp325_firmware to a higher version than 1.8.11.0,and avoid the version 1.8.11.0; Upgrade altus nexto_xpress_xp340_firmware to a higher version than 1.8.11.0,and avoid the version 1.8.11.0; Upgrade altus hadron_xtorm_hx3040_firmware to a higher version than 1.7.58.0,and avoid the version 1.7.58.0