CVE-2021-40333

The CVE-2021-40333 issue affects Hitachi Energy FOX61x and XCM20 where a weak password requirement (default credentials) can allow unauthorized access to the DCN routing configuration. According to the ICS advisory ICSA-21-341-02, affected products include XMC20/XFOX61x lines with versions prior ...

CVE-2021-40333 Weak default credential associated with TCP port 26

Weak Password Requirements vulnerability in Hitachi Energy FOX61x, XCM20 allows an attacker to gain unauthorized access to the Data Communication Network DCN routing configuration. This issue affects: Hitachi Energy FOX61x versions prior to R15A. Hitachi Energy XCM20 versions prior to R15A...

CVE-2021-40334 SSH activation problem in the proprietary management protocol (port TCP 5558)

Missing Handler vulnerability in the proprietary management protocol port TCP 5558 of Hitachi Energy FOX61x, XCM20 allows an attacker that exploits the vulnerability by activating SSH on port TCP 5558 to cause disruption to the NMS and NE communication. This issue affects: Hitachi Energy FOX61x...

CVE-2021-40334

The CVE-2021-40334 entry describes a Missing Handler vulnerability in the proprietary management protocol on TCP port 5558 for Hitachi Energy FOX61x and XCM20 (pre-R15A). The root cause is the handling of SSH activation on port 5558, which can disrupt NMS and NE communications. Affected products:...

Hitachi Energy Fox61X和Hitachi Energy Xcm20 安全漏洞

Hitachi Energy Fox61X and Hitachi Energy Xcm20 are both products of Hitachi Energy, Switzerland.Hitachi Energy Fox61X is an excellent multi-service multiplexer. The Hitachi Energy Fox61X is an excellent multi-service multiplexer for expanding existing communications infrastructures, and the Hitac...

Hitachi Energy Fox61X和Hitachi Energy Xcm20 安全漏洞

Hitachi Energy Fox61X and Hitachi Energy Xcm20 are both products of Hitachi Energy, Switzerland.Hitachi Energy Fox61X is an excellent multi-service multiplexer. The Hitachi Energy Fox61X is an excellent multi-service multiplexer for expanding existing communications infrastructures, and the Hitac...

Hitachi Energy RTU500 series BCI

1. EXECUTIVE SUMMARY CVSS v3 7.5 ATTENTION: Exploitable remotely/low attack complexity Vendor: Hitachi Energy Equipment: RTU500 series Bidirectional Communication Interface BCI Vulnerability: Improper Input Validation 2. RISK EVALUATION Successful exploitation of this vulnerability could allow a...

Hitachi Energy RTU500 series

1. EXECUTIVE SUMMARY CVSS v3 8.6 ATTENTION: Exploitable remotely/low attack complexity Vendor: Hitachi Energy Equipment: RTU500 series Vulnerabilities: Observable Discrepancy, Buffer Over-read, Out-of-bounds Read 2. RISK EVALUATION Successful exploitation of these vulnerabilities could allow an...

Hitachi Energy PCM600 Update Manager

1. EXECUTIVE SUMMARY CVSS v3 6.7 Vendor: Hitachi Energy Equipment: PCM600 Update Manager Vulnerability: Improper Certificate Validation 2. RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker to bypass the certificate validation and install an untrusted software...

Hitachi Energy APM Edge

1. EXECUTIVE SUMMARY CVSS v3 8.2 ATTENTION: Low attack complexity Vendor: Hitachi Energy Equipment: Transformer Asset Performance Management APM Edge Vulnerability: Reliance on Uncontrolled Component 2. UPDATE OR REPOSTED INFORMATION This updated advisory is a follow-up to the original advisory...

Hitachi Energy Retail Operations and CSB Software

1. EXECUTIVE SUMMARY CVSS v3 7.2 ATTENTION: High attack complexity Vendor: Hitachi Energy Equipment: Retail Operations and Counterparty Settlement and Billing CSB Product Vulnerability: Improper Access Control 2. RISK EVALUATION Successful exploitation of this vulnerability could allow...

CVE-2021-35533

Improper Input Validation vulnerability in the APDU parser in the Bidirectional Communication Interface BCI IEC 60870-5-104 function of Hitachi Energy RTU500 series allows an attacker to cause the receiving RTU500 CMU of which the BCI is enabled to reboot when receiving a specially crafted messag...

CVE-2021-35533

Improper Input Validation vulnerability in the APDU parser in the Bidirectional Communication Interface BCI IEC 60870-5-104 function of Hitachi Energy RTU500 series allows an attacker to cause the receiving RTU500 CMU of which the BCI is enabled to reboot when receiving a specially crafted messag...

Input validation

Improper Input Validation vulnerability in the APDU parser in the Bidirectional Communication Interface BCI IEC 60870-5-104 function of Hitachi Energy RTU500 series allows an attacker to cause the receiving RTU500 CMU of which the BCI is enabled to reboot when receiving a specially crafted messag...

CVE-2021-35533

The CVE-2021-35533 affects Hitachi Energy RTU500 series CMU firmware 12.0.x, 12.2.x and 12.4.x, in the APDU parser of the BCI IEC 60870-5-104 function. A crafted BCI message can trigger a reboot of the RTU500 CMU when the BCI is enabled and configured. By default, the BCI function is disabled, re...

CVE-2021-35533 Specially Crafted IEC 60870-5-104 Packet Vulnerability in RTU500 series

Improper Input Validation vulnerability in the APDU parser in the Bidirectional Communication Interface BCI IEC 60870-5-104 function of Hitachi Energy RTU500 series allows an attacker to cause the receiving RTU500 CMU of which the BCI is enabled to reboot when receiving a specially crafted messag...

Hitachi Energy Relion 输入验证错误漏洞

Hitachi Energy Relion is a power system for protection, control, measurement and monitoring from Hitachi Energy, Switzerland. A security vulnerability exists in the Hitachi Energy RTU500 series that stems from incorrect input validation in the APDU parser in the IEC 60870-5-104 function...

PT-2021-20956 · Hitachi Energy · Rtu500 Series Cmu Firmware

Name of the Vulnerable Software and Affected Versions: Hitachi Energy RTU500 series CMU Firmware version 12.0. Hitachi Energy RTU500 series CMU Firmware version 12.2. Hitachi Energy RTU500 series CMU Firmware version 12.4. Description: The issue is related to an Improper Input Validation...

CVE-2021-40333

Weak Password Requirements vulnerability in Hitachi Energy FOX61x, XCM20 allows an attacker to gain unauthorized access to the Data Communication Network DCN routing configuration. This issue affects: Hitachi Energy FOX61x versions prior to R15A. Hitachi Energy XCM20 versions prior to R15A...

CVE-2021-40334

Missing Handler vulnerability in the proprietary management protocol port TCP 5558 of Hitachi Energy FOX61x, XCM20 allows an attacker that exploits the vulnerability by activating SSH on port TCP 5558 to cause disruption to the NMS and NE communication. This issue affects: Hitachi Energy FOX61x...