CVE-2021-40333: Weak default credential associated with TCP port 26

Published Dec 2, 2021
·
Updated

Weak Password Requirements vulnerability in Hitachi Energy FOX61x, XCM20 allows an attacker to gain unauthorized access to the Data Communication Network (DCN) routing configuration. This issue affects: Hitachi Energy FOX61x versions prior to R15A. Hitachi Energy XCM20 versions prior to R15A.

Affected Software

4 affected components
hitachienergy Fox615 Firmware<r15a
hitachienergy Fox615
hitachienergy Xcm20 Firmware<r15a
hitachienergy Xcm20

Remediation

Information

Fixed in FOX61x R14A Hotfix or XMC20 R14A Hotfix Fixed in FOX61x R15A or XMC20 R15A

Event History

Dec 2, 2021
CVE Published
via MITRE·06:29 PM
Data Sourced
via MITRE·06:29 PM
RemedyDescriptionSeverityWeakness
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Frequently Asked Questions

1

What is CVE-2021-40333?

CVE-2021-40333 is a vulnerability in Hitachi Energy FOX61x, XCM20 that allows an attacker to gain unauthorized access to the Data Communication Network (DCN) routing configuration.

2

How does CVE-2021-40333 affect Hitachi Energy FOX61x?

CVE-2021-40333 affects Hitachi Energy FOX61x versions prior to R15A.

3

How does CVE-2021-40333 affect Hitachi Energy XCM20?

CVE-2021-40333 affects Hitachi Energy XCM20 versions prior to R15A.

4

What is the severity of CVE-2021-40333?

CVE-2021-40333 has a severity rating of 7.1 (critical).

5

Is Hitachi Energy FOX615 vulnerable to CVE-2021-40333?

No, Hitachi Energy FOX615 is not vulnerable to CVE-2021-40333.

6

Is Hitachi Energy XCM20 vulnerable to CVE-2021-40333?

No, Hitachi Energy XCM20 is not vulnerable to CVE-2021-40333.

7

How can the Weak Password Requirements vulnerability in Hitachi Energy FOX61x and XCM20 be fixed?

To fix the Weak Password Requirements vulnerability, update to version R15A or later of Hitachi Energy FOX61x and XCM20.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203