Lucene search

K
nvd[email protected]NVD:CVE-2021-40334
HistoryDec 02, 2021 - 7:15 p.m.

CVE-2021-40334

2021-12-0219:15:08
CWE-431
web.nvd.nist.gov
2
cve-2021-40334
hitachi energy
fox61x
xcm20
management protocol
port tcp 5558
vulnerability
ssh
disruption
nms
ne communication

CVSS2

5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

EPSS

0.001

Percentile

46.0%

Missing Handler vulnerability in the proprietary management protocol (port TCP 5558) of Hitachi Energy FOX61x, XCM20 allows an attacker that exploits the vulnerability by activating SSH on port TCP 5558 to cause disruption to the NMS and NE communication. This issue affects: Hitachi Energy FOX61x versions prior to R15A. Hitachi Energy XCM20 versions prior to R15A.

Affected configurations

Nvd
Node
hitachienergyfox615Match-
AND
hitachienergyfox615_firmwareRange<r15a
Node
hitachienergyxcm20Match-
AND
hitachienergyxcm20_firmwareRange<r15a
VendorProductVersionCPE
hitachienergyfox615-cpe:2.3:h:hitachienergy:fox615:-:*:*:*:*:*:*:*
hitachienergyfox615_firmware*cpe:2.3:o:hitachienergy:fox615_firmware:*:*:*:*:*:*:*:*
hitachienergyxcm20-cpe:2.3:h:hitachienergy:xcm20:-:*:*:*:*:*:*:*
hitachienergyxcm20_firmware*cpe:2.3:o:hitachienergy:xcm20_firmware:*:*:*:*:*:*:*:*

CVSS2

5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

EPSS

0.001

Percentile

46.0%

Related for NVD:CVE-2021-40334