Altus Sistemas de Automacao Products CSRF / Command Injection / Hardcoded Credentials
Posted on 19 August 2021
Multiple Altus Sistemas de Automacao products such as the Nexto NX30xx Series, Nexto NX5xxx Series, Nexto Xpress XP3xx Series, and Hadron Xtorm HX3040 Series suffer from command injection, cross site request forgery, and hardcoded credential vulnerabilities.
