CVE-2021-40333criticalCWE-521

CVE-2021-40333: critical vulnerability in Hitachi Energy FOX61x

Weak default credential associated with TCP port 26

Published · Updated

Follow this CVE+ Monitor FOX61x+ Monitor XCM20

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

28Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 9epss 0.7%
Weak Password Requirements vulnerability in Hitachi Energy FOX61x, XCM20 allows an attacker to gain unauthorized access to the Data Communication Network (DCN) routing configuration. This issue affects: Hitachi Energy FOX61x versions prior to R15A. Hitachi Energy XCM20 versions prior to R15A.
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:H/A:H
Affected products
Hitachi Energy · FOX61xHitachi Energy · XCM20
Related CVEs — Hitachi Energy FOX61x

In the same product, most dangerous first.

CVE-2021-40334HIGHSSH activation problem in the proprietary management protocol (port TCP 5558)EPSS 1.0%CVE-2024-2461MEDIUMCVE-2024-2461EPSS 0.5%CVE-2024-2462MEDIUMCVE-2024-2462EPSS 0.2%