PT-2021-5861 · Hitachi Energy · Hitachi Energy Xcm20+1

Published 2021-11-23 · Updated 2021-12-08 · CVE-2021-40334

Positive Technologies (AI Summary)

CVSS v3.1

8.6

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Hitachi Energy FOX61x versions prior to R15A Hitachi Energy XCM20 versions prior to R15A

Description The issue is related to a Missing Handler vulnerability in the proprietary management protocol of Hitachi Energy FOX61x and XCM20, which can be exploited by activating SSH on port TCP 5558, causing disruption to the NMS and NE communication. The vulnerability is associated with deficiencies in data processing. An attacker can exploit this vulnerability to cause a denial of service using the Data Communication Network (DCN) and Network Management System (NMS) services.

Recommendations For Hitachi Energy FOX61x versions prior to R15A, update to version R15A or later to resolve the issue. For Hitachi Energy XCM20 versions prior to R15A, update to version R15A or later to resolve the issue. As a temporary workaround, consider restricting access to port TCP 5558 to minimize the risk of exploitation.

Fix

Weakness Enumeration

CWE-431

Related Identifiers

BDU:2022-00376

CVE-2021-40334

Affected Products

Hitachi Energy Fox61X

Hitachi Energy Xcm20

References · 10

• https://search.abb.com/library/Download.aspx?DocumentID=8DBD000062&LanguageCode=en&DocumentPartId=&Action=Launch · Vendor Advisory
• https://search.abb.com/library/Download.aspx?DocumentID=8DBD000069&LanguageCode=en&DocumentPartId=&Action=Launch · Vendor Advisory
• https://bdu.fstec.ru/vul/2022-00376 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2021-40334 · Security Note
• https://osv.dev/vulnerability/CVE-2021-40334 · Vendor Advisory
• https://search.abb.com/library/Download.aspx?DocumentID=8DBD000062&LanguageCode=en&DocumentPartId=&Action=Launch · Note
• https://t.me/cvenotify/24129 · Telegram Post
• https://t.me/cvenotify/24429 · Telegram Post
• https://t.me/cibsecurity/33282 · Telegram Post
• https://search.abb.com/library/Download.aspx?DocumentID=8DBD000069&LanguageCode=en&DocumentPartId=&Action=Launch · Note