CVE-2021-35531CWE-20

CVE-2021-35531: falha em Hitachi Energy TXpert Hub CoreTec 4 version

Remote Code Execution in TXpert Hub CoreTec 4

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar TXpert Hub CoreTec

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

3Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackepss 0.3%
Improper Input Validation vulnerability in a particular configuration setting field of Hitachi Energy TXpert Hub CoreTec 4 product, allows an attacker with access to an authorized user with ADMIN or ENGINEER role rights to inject an OS command that is executed by the system. This issue affects: Hitachi Energy TXpert Hub CoreTec 4 version 2.0.0; 2.0.1; 2.1.0; 2.1.1; 2.1.2; 2.1.3; 2.2.0; 2.2.1.
Produtos afetados
Hitachi Energy · TXpert Hub CoreTec 4 version
CVEs relacionadas — Hitachi Energy TXpert Hub CoreTec 4 version

No mesmo produto, das mais perigosas para as menos.

CVE-2021-35530MEDIUMUser authentication bypass in TXpert Hub CoreTec 4EPSS 0.2%CVE-2021-35532—Firmware upload verification bypass in TXpert Hub CoreTec 4EPSS 0.2%