Lucene search

[email protected]CVE-2021-40341

HistoryJan 05, 2023 - 10:15 p.m.

CVE-2021-40341

2023-01-0522:15:08

CWE-326

[email protected]

web.nvd.nist.gov

hitachi

energy

foxman-un

des cipher

user credentials

encryption

vulnerability

cve-2021-40341

unem

nvd

7.1 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N

5.3 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.0%

JSON

DES cipher, which has inadequate encryption strength, is used Hitachi Energy FOXMAN-UN to encrypt user credentials used to access the Network Elements. Successful exploitation allows sensitive information to be decrypted easily. This issue affects

FOXMAN-UN product: FOXMAN-UN R16A, FOXMAN-UN R15B, FOXMAN-UN R15A, FOXMAN-UN R14B, FOXMAN-UN R14A, FOXMAN-UN R11B, FOXMAN-UN R11A, FOXMAN-UN R10C, FOXMAN-UN R9C;
UNEM product: UNEM R16A, UNEM R15B, UNEM R15A, UNEM R14B, UNEM R14A, UNEM R11B, UNEM R11A, UNEM R10C, UNEM R9C.

List of CPEs:

cpe:2.3:a:hitachienergy:foxman-un:R16A:::::::*
cpe:2.3:a:hitachienergy:foxman-un:R15B:::::::*
cpe:2.3:a:hitachienergy:foxman-un:R15A:::::::*
cpe:2.3:a:hitachienergy:foxman-un:R14B:::::::*
cpe:2.3:a:hitachienergy:foxman-un:R14A:::::::*
cpe:2.3:a:hitachienergy:foxman-un:R11B:::::::*
cpe:2.3:a:hitachienergy:foxman-un:R11A:::::::*
cpe:2.3:a:hitachienergy:foxman-un:R10C:::::::*
cpe:2.3:a:hitachienergy:foxman-un:R9C:::::::*
cpe:2.3:a:hitachienergy:unem:R16A:::::::*
cpe:2.3:a:hitachienergy:unem:R15B:::::::*
cpe:2.3:a:hitachienergy:unem:R15A:::::::*
cpe:2.3:a:hitachienergy:unem:R14B:::::::*
cpe:2.3:a:hitachienergy:unem:R14A:::::::*
cpe:2.3:a:hitachienergy:unem:R11B:::::::*
cpe:2.3:a:hitachienergy:unem:R11A:::::::*
cpe:2.3:a:hitachienergy:unem:R10C:::::::*
cpe:2.3:a:hitachienergy:unem:R9C:::::::*

Affected configurations

NVD

Node

hitachienergyfoxman-unMatchr9c

hitachienergyfoxman-unMatchr10c

hitachienergyfoxman-unMatchr11a

hitachienergyfoxman-unMatchr11b

hitachienergyfoxman-unMatchr14a

hitachienergyfoxman-unMatchr14b

hitachienergyfoxman-unMatchr15a

hitachienergyfoxman-unMatchr15b

hitachienergyfoxman-unMatchr16a

hitachienergyunemMatchr9c

hitachienergyunemMatchr10c

hitachienergyunemMatchr11a

hitachienergyunemMatchr11b

hitachienergyunemMatchr14a

hitachienergyunemMatchr14b

hitachienergyunemMatchr15a

hitachienergyunemMatchr15b

hitachienergyunemMatchr16a

CPENameOperatorVersion
hitachienergy:foxman-unhitachienergy foxman-uneqr9c
hitachienergy:foxman-unhitachienergy foxman-uneqr10c
hitachienergy:foxman-unhitachienergy foxman-uneqr11a
hitachienergy:foxman-unhitachienergy foxman-uneqr11b
hitachienergy:foxman-unhitachienergy foxman-uneqr14a
hitachienergy:foxman-unhitachienergy foxman-uneqr14b
hitachienergy:foxman-unhitachienergy foxman-uneqr15a
hitachienergy:foxman-unhitachienergy foxman-uneqr15b
hitachienergy:foxman-unhitachienergy foxman-uneqr16a
hitachienergy:unemhitachienergy unemeqr9c

CPE	Name	Operator	Version
hitachienergy:foxman-un	hitachienergy foxman-un	eq	r9c
hitachienergy:foxman-un	hitachienergy foxman-un	eq	r10c
hitachienergy:foxman-un	hitachienergy foxman-un	eq	r11a
hitachienergy:foxman-un	hitachienergy foxman-un	eq	r11b
hitachienergy:foxman-un	hitachienergy foxman-un	eq	r14a
hitachienergy:foxman-un	hitachienergy foxman-un	eq	r14b
hitachienergy:foxman-un	hitachienergy foxman-un	eq	r15a
hitachienergy:foxman-un	hitachienergy foxman-un	eq	r15b
hitachienergy:foxman-un	hitachienergy foxman-un	eq	r16a
hitachienergy:unem	hitachienergy unem	eq	r9c

Rows per page:

1-10 of 181

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "product": "FOXMAN-UN",
    "vendor": "Hitachi Energy",
    "versions": [
      {
        "status": "affected",
        "version": "FOXMAN-UN R16A"
      },
      {
        "status": "affected",
        "version": "FOXMAN-UN R15B"
      },
      {
        "status": "affected",
        "version": "FOXMAN-UN R15A"
      },
      {
        "status": "affected",
        "version": "FOXMAN-UN R14B"
      },
      {
        "status": "affected",
        "version": "FOXMAN-UN R14A"
      },
      {
        "status": "affected",
        "version": "FOXMAN-UN R11B"
      },
      {
        "status": "affected",
        "version": "FOXMAN-UN R11A"
      },
      {
        "status": "affected",
        "version": "FOXMAN-UN R10C"
      },
      {
        "status": "affected",
        "version": "FOXMAN-UN R9C"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "UNEM",
    "vendor": "Hitachi Energy",
    "versions": [
      {
        "status": "affected",
        "version": "UNEM R16A"
      },
      {
        "status": "affected",
        "version": "UNEM R15B"
      },
      {
        "status": "affected",
        "version": "UNEM R15A"
      },
      {
        "status": "affected",
        "version": "UNEM R14B"
      },
      {
        "status": "affected",
        "version": "UNEM R14A"
      },
      {
        "status": "affected",
        "version": "UNEM R11B"
      },
      {
        "status": "affected",
        "version": "UNEM R11A"
      },
      {
        "status": "affected",
        "version": "UNEM R10C"
      },
      {
        "status": "affected",
        "version": "UNEM R9C"
      }
    ]
  }
]

References

search.abb.com/library/Download.aspx?DocumentID=8DBD000083&LanguageCode=en&DocumentPartId=&Action=Launch

search.abb.com/library/Download.aspx?DocumentID=8DBD000084&LanguageCode=en&DocumentPartId=&Action=Launch

7.1 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N

5.3 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.0%

JSON

Related for CVE-2021-40341

prion1 cvelist1 nvd1 ics2