CWE
521
Advisory Published
Updated

CVE-2021-40333: Weak default credential associated with TCP port 26

First published: Tue Nov 23 2021(Updated: )

Weak Password Requirements vulnerability in Hitachi Energy FOX61x, XCM20 allows an attacker to gain unauthorized access to the Data Communication Network (DCN) routing configuration. This issue affects: Hitachi Energy FOX61x versions prior to R15A. Hitachi Energy XCM20 versions prior to R15A.

Credit: cybersecurity@hitachienergy.com

Affected SoftwareAffected VersionHow to fix
Hitachienergy Fox615 Firmware<r15a
Hitachienergy Fox615
Hitachienergy Xcm20 Firmware<r15a
Hitachienergy Xcm20

Remedy

Fixed in FOX61x R14A Hotfix or XMC20 R14A Hotfix Fixed in FOX61x R15A or XMC20 R15A

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Frequently Asked Questions

  • What is CVE-2021-40333?

    CVE-2021-40333 is a vulnerability in Hitachi Energy FOX61x, XCM20 that allows an attacker to gain unauthorized access to the Data Communication Network (DCN) routing configuration.

  • How does CVE-2021-40333 affect Hitachi Energy FOX61x?

    CVE-2021-40333 affects Hitachi Energy FOX61x versions prior to R15A.

  • How does CVE-2021-40333 affect Hitachi Energy XCM20?

    CVE-2021-40333 affects Hitachi Energy XCM20 versions prior to R15A.

  • What is the severity of CVE-2021-40333?

    CVE-2021-40333 has a severity rating of 7.1 (critical).

  • Is Hitachi Energy FOX615 vulnerable to CVE-2021-40333?

    No, Hitachi Energy FOX615 is not vulnerable to CVE-2021-40333.

  • Is Hitachi Energy XCM20 vulnerable to CVE-2021-40333?

    No, Hitachi Energy XCM20 is not vulnerable to CVE-2021-40333.

  • How can the Weak Password Requirements vulnerability in Hitachi Energy FOX61x and XCM20 be fixed?

    To fix the Weak Password Requirements vulnerability, update to version R15A or later of Hitachi Energy FOX61x and XCM20.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2025 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203