Threat Investigation
Request a demo

CVE-2021-40333

Critical

Description

Weak Password Requirements vulnerability in Hitachi Energy FOX61x, XCM20 allows an attacker to gain unauthorized access to the Data Communication Network (DCN) routing configuration. This issue affects: Hitachi Energy FOX61x versions prior to R15A. Hitachi Energy XCM20 versions prior to R15A.

SeverityCritical
CVSS9.0
Exploit probability—
ProductHitachienergy Xcm20 Firmware
PublishedDec 2, 2021
First seenDec 2, 2021
Weakness typeCWE-521CWE-521

How to fix

Update
  • hitachienergy xcm20_firmwarer15a or later
  • hitachienergy fox615_firmwarer15a or later

Affected products

ProductAffected versionsFixed in
hitachienergy xcm20_firmwarev < r15ar15a
hitachienergy fox615_firmwarev < r15ar15a

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.