Lucene search

K
nvd[email protected]NVD:CVE-2021-40333
HistoryDec 02, 2021 - 7:15 p.m.

CVE-2021-40333

2021-12-0219:15:08
CWE-521
web.nvd.nist.gov
6
hitachi energy
fox61x
xcm20
vulnerability
unauthorized access
data communication network
routing configuration
cve-2021-40333

CVSS2

5.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:S/C:P/I:P/A:N

CVSS3

7.1

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:N

EPSS

0.001

Percentile

22.7%

Weak Password Requirements vulnerability in Hitachi Energy FOX61x, XCM20 allows an attacker to gain unauthorized access to the Data Communication Network (DCN) routing configuration. This issue affects: Hitachi Energy FOX61x versions prior to R15A. Hitachi Energy XCM20 versions prior to R15A.

Affected configurations

Nvd
Node
hitachienergyfox615Match-
AND
hitachienergyfox615_firmwareRange<r15a
Node
hitachienergyxcm20Match-
AND
hitachienergyxcm20_firmwareRange<r15a
VendorProductVersionCPE
hitachienergyfox615-cpe:2.3:h:hitachienergy:fox615:-:*:*:*:*:*:*:*
hitachienergyfox615_firmware*cpe:2.3:o:hitachienergy:fox615_firmware:*:*:*:*:*:*:*:*
hitachienergyxcm20-cpe:2.3:h:hitachienergy:xcm20:-:*:*:*:*:*:*:*
hitachienergyxcm20_firmware*cpe:2.3:o:hitachienergy:xcm20_firmware:*:*:*:*:*:*:*:*

CVSS2

5.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:S/C:P/I:P/A:N

CVSS3

7.1

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:N

EPSS

0.001

Percentile

22.7%

Related for NVD:CVE-2021-40333