CVE-2021-40338: OWASP Related Vulnerabilities in Hitachi Energy’s LinkOne Product
First published: Thu Dec 23 2021(Updated: )
Hitachi Energy LinkOne product, has a vulnerability due to a web server misconfiguration, that enables debug mode and reveals the full path of the filesystem directory when an attacker generates errors during a query operation. This issue affects: Hitachi Energy LinkOne 3.20; 3.22; 3.23; 3.24; 3.25; 3.26.
Credit: cybersecurity@hitachienergy.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Hitachi Linkone | =3.20 | |
| Hitachi Linkone | =3.22 | |
| Hitachi Linkone | =3.23 | |
| Hitachi Linkone | =3.24 | |
| Hitachi Linkone | =3.25 | |
| Hitachi Linkone | =3.26 |
Remedy
For each version, apply security patch or update to LinkOne v3.27
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the vulnerability of CVE-2021-40338?
The vulnerability of CVE-2021-40338 is a web server misconfiguration in Hitachi Energy LinkOne product, which enables debug mode and reveals the full path of the filesystem directory during error queries.
Which versions of Hitachi Energy LinkOne are affected by CVE-2021-40338?
The versions affected by CVE-2021-40338 are Hitachi Energy LinkOne 3.20, 3.22, 3.23, 3.24, 3.25, and 3.26.
What is the severity level of CVE-2021-40338?
The severity level of CVE-2021-40338 is medium with a CVSS score of 5.3.
How does CVE-2021-40338 impact Hitachi Energy LinkOne?
CVE-2021-40338 impacts Hitachi Energy LinkOne by allowing attackers to reveal the full path of the filesystem directory through error queries when the web server is misconfigured.
How can I mitigate the vulnerability in Hitachi Energy LinkOne?
To mitigate the vulnerability in Hitachi Energy LinkOne, it is recommended to apply the necessary patches or updates provided by Hitachi and properly configure the web server.
- collector/nvd-index
- agent/type
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/author
- agent/title
- agent/weakness
- agent/remedy
- agent/references
- agent/severity
- agent/last-modified-date
- agent/tags
- agent/description
- agent/first-publish-date
- agent/event
- vendor/hitachi
- canonical/hitachi linkone
- version/hitachi linkone/3.20
- version/hitachi linkone/3.22
- version/hitachi linkone/3.23
- version/hitachi linkone/3.24
- version/hitachi linkone/3.25
- version/hitachi linkone/3.26