CVE-2021-40334: SSH activation problem in the proprietary management protocol (port TCP 5558)
First published: Tue Nov 23 2021(Updated: )
Missing Handler vulnerability in the proprietary management protocol (port TCP 5558) of Hitachi Energy FOX61x, XCM20 allows an attacker that exploits the vulnerability by activating SSH on port TCP 5558 to cause disruption to the NMS and NE communication. This issue affects: Hitachi Energy FOX61x versions prior to R15A. Hitachi Energy XCM20 versions prior to R15A.
Credit: cybersecurity@hitachienergy.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Hitachienergy Fox615 Firmware | <r15a | |
| Hitachienergy Fox615 | ||
| Hitachienergy Xcm20 Firmware | <r15a | |
| Hitachienergy Xcm20 |
Remedy
Fixed in FOX61x R15A or XMC20 R15A
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the CVE ID of this vulnerability?
The CVE ID of this vulnerability is CVE-2021-40334.
What is the severity rating of CVE-2021-40334?
The severity rating of CVE-2021-40334 is 7.5 (high).
Which Hitachi Energy products are affected by CVE-2021-40334?
The Hitachi Energy FOX61x (firmware up to exclusive version r15a) and Hitachi Energy XCM20 (firmware up to exclusive version r15a) are affected by CVE-2021-40334.
How can an attacker exploit CVE-2021-40334?
An attacker can exploit CVE-2021-40334 by activating SSH on port TCP 5558 and causing disruption to the NMS and NE communication.
Are there any references for CVE-2021-40334?
Yes, you can find references for CVE-2021-40334 at the following links: 1. [Reference 1](https://search.abb.com/library/Download.aspx?DocumentID=8DBD000062&LanguageCode=en&DocumentPartId=&Action=Launch) 2. [Reference 2](https://search.abb.com/library/Download.aspx?DocumentID=8DBD000069&LanguageCode=en&DocumentPartId=&Action=Launch)
- agent/references
- collector/nvd-index
- agent/software-canonical-lookup
- agent/type
- collector/mitre-cve
- source/MITRE
- agent/author
- agent/title
- agent/weakness
- agent/remedy
- agent/severity
- agent/last-modified-date
- agent/tags
- agent/description
- agent/first-publish-date
- agent/softwarecombine
- agent/event
- vendor/hitachienergy
- canonical/hitachienergy fox615 firmware
- canonical/hitachienergy fox615
- canonical/hitachienergy xcm20 firmware
- canonical/hitachienergy xcm20