What is CVE-2021-40334?

CVE-2021-40334 is a high-severity vulnerability in Hitachi Energy Fox61x, classified under CWE-431. CVSS score: 8.6/10. Published 2021-12-02.

How severe is CVE-2021-40334?

High severity. CVSS v3 base score is 8.6 out of 10.

Vulnerability in Hitachi Energy Fox61x

CVE-2021-40334

Missing Handler vulnerability in the proprietary management protocol (port TCP 5558) of Hitachi Energy FOX61x, XCM20 allows an attacker that exploits the vulnerability by activating SSH on port TCP 5558 to cause disruption to the NMS and N…

EPSS: 0.010 (57.0th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 8.6 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H.

Affected products

Hitachi Energy Fox61x — versions R15A
Hitachi Energy Xcm20 — versions R15A
Hitachienergy Fox615
Hitachienergy Fox615_firmware
Hitachienergy Xcm20
Hitachienergy Xcm20_firmware

Weakness classification (CWE)

CWE-431

References

cybersecurity@hitachienergy.com (x_refsource_CONFIRM, Vendor Advisory)
cybersecurity@hitachienergy.com (x_refsource_CONFIRM, Vendor Advisory)

Frequently asked questions

What is CVE-2021-40334?: CVE-2021-40334 is a high-severity vulnerability in Hitachi Energy Fox61x, classified under CWE-431. CVSS score: 8.6/10. Published 2021-12-02.
How severe is CVE-2021-40334?: High severity. CVSS v3 base score is 8.6 out of 10.