Lucene search

Hitachi EnergyCVE-2021-40333

HistoryDec 02, 2021 - 7:15 p.m.

CVE-2021-40333

2021-12-0219:15:08

CWE-521

Hitachi Energy

web.nvd.nist.gov

cve-2021-40333

hitachi energy

fox61x

xcm20

vulnerability

unauthorized access

dcn routing configuration

nvd

CVSS2

5.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:S/C:P/I:P/A:N

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:H/A:H

AI Score

6.9

Confidence

High

EPSS

0.001

Percentile

22.7%

JSON

Weak Password Requirements vulnerability in Hitachi Energy FOX61x, XCM20 allows an attacker to gain unauthorized access to the Data Communication Network (DCN) routing configuration. This issue affects: Hitachi Energy FOX61x versions prior to R15A. Hitachi Energy XCM20 versions prior to R15A.

Affected configurations

Nvd

Node

hitachienergyfox615Match-

AND

hitachienergyfox615_firmwareRange<r15a

Node

hitachienergyxcm20Match-

AND

hitachienergyxcm20_firmwareRange<r15a

VendorProductVersionCPE
hitachienergyfox615-cpe:2.3:h:hitachienergy:fox615:-:*:*:*:*:*:*:*
hitachienergyfox615_firmware*cpe:2.3:o:hitachienergy:fox615_firmware:*:*:*:*:*:*:*:*
hitachienergyxcm20-cpe:2.3:h:hitachienergy:xcm20:-:*:*:*:*:*:*:*
hitachienergyxcm20_firmware*cpe:2.3:o:hitachienergy:xcm20_firmware:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
hitachienergy	fox615	-	cpe:2.3:h:hitachienergy:fox615:-:::::::*
hitachienergy	fox615_firmware	*	cpe:2.3:o:hitachienergy:fox615_firmware::::::::
hitachienergy	xcm20	-	cpe:2.3:h:hitachienergy:xcm20:-:::::::*
hitachienergy	xcm20_firmware	*	cpe:2.3:o:hitachienergy:xcm20_firmware::::::::

CNA Affected

[
  {
    "product": "FOX61x",
    "vendor": "Hitachi Energy",
    "versions": [
      {
        "lessThan": "R15A",
        "status": "affected",
        "version": "R15A",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "XCM20",
    "vendor": "Hitachi Energy",
    "versions": [
      {
        "lessThan": "R15A",
        "status": "affected",
        "version": "R15A",
        "versionType": "custom"
      }
    ]
  }
]

References

search.abb.com/library/Download.aspx?DocumentID=8DBD000062&LanguageCode=en&DocumentPartId=&Action=Launch

search.abb.com/library/Download.aspx?DocumentID=8DBD000069&LanguageCode=en&DocumentPartId=&Action=Launch

Social References

CVSS2

5.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:S/C:P/I:P/A:N

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:H/A:H

AI Score

6.9

Confidence

High

EPSS

0.001

Percentile

22.7%

JSON

Related for CVE-2021-40333