CVE-2021-40333

🗓️ 02 Dec 2021 18:29:36Reported by Hitachi EnergyType

cve🔗 web.nvd.nist.gov📰️ 6 Media mentions👁 53 Views

Weak Password Requirements vulnerability in Hitachi Energy FOX61x, XCM20 allows unauthorized access to DCN routing configuratio

Reporter	Title	Published	Views	Family All 9
ATTACKERKB	CVE-2021-40333	23 Nov 202111:00	–	attackerkb
BDU FSTEC	The vulnerability of the Data Communication Network (DCN) service provided by the microprogramming software for Hitachi Energy FOX615 and XCM20 multi-server platforms arises from weak password requirements. This vulnerability allows attackers to gain unauthorized access to protected information.	25 Jan 202200:00	–	bdu_fstec
Circl	CVE-2021-40333	2 Dec 202122:36	–	circl
CNNVD	Hitachi Energy Fox61X和Hitachi Energy Xcm20 安全漏洞	2 Dec 202100:00	–	cnnvd
Cvelist	CVE-2021-40333 Weak default credential associated with TCP port 26	2 Dec 202118:29	–	cvelist
EUVD	EUVD-2021-27512	3 Oct 202520:07	–	euvd
ICS	Hitachi Energy XMC20 and FOX61x	7 Dec 202100:00	–	ics
NVD	CVE-2021-40333	2 Dec 202119:15	–	nvd
Prion	Design/Logic Flaw	2 Dec 202119:15	–	prion

NVD

Node

hitachienergy fox615_firmwareRange<r15a

AND

hitachienergy fox615Match-

Node

hitachienergy xcm20_firmwareRange<r15a

AND

hitachienergy xcm20Match-

[
  {
    "product": "FOX61x",
    "vendor": "Hitachi Energy",
    "versions": [
      {
        "lessThan": "R15A",
        "status": "affected",
        "version": "R15A",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "XCM20",
    "vendor": "Hitachi Energy",
    "versions": [
      {
        "lessThan": "R15A",
        "status": "affected",
        "version": "R15A",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
search	www.search.abb.com/library/Download.aspx
search	www.search.abb.com/library/Download.aspx

17 Jun 2026 04:06Current

7.5High risk

Vulners AI Score7.5

CVSS 25.5

CVSS 3.17.1 - 9

EPSS0.00634

CWE-521