What is CVE-2021-40340?

CVE-2021-40340 is an Information Exposure vulnerability in the Hitachi Energy LinkOne application due to a misconfiguration in the ASP server.

What is the severity of CVE-2021-40340?

The severity of CVE-2021-40340 is high, with a CVSS score of 7.5.

How does CVE-2021-40340 impact Hitachi LinkOne?

CVE-2021-40340 exposes server and ASP.net information, which can be used by attackers for reconnaissance and further exploitation.

Which versions of Hitachi LinkOne are affected by CVE-2021-40340?

Versions 3.20, 3.22, 3.23, 3.24, 3.25, and 3.26 of Hitachi LinkOne are affected by CVE-2021-40340.

How can CVE-2021-40340 be fixed?

To fix CVE-2021-40340, it is recommended to apply the necessary patches or updates provided by Hitachi for the affected versions of LinkOne.

Vulnerability/
CVE-2021-40340

high

7.5

CWE

200

28/1/2022

17/9/2024

CVE-2021-40340: OWASP Related Vulnerabilities in Hitachi Energy’s LinkOne Product

First published: Fri Jan 28 2022(Updated: )

Information Exposure vulnerability in Hitachi Energy LinkOne application, due to a misconfiguration in the ASP server exposes server and ASP.net information, an attacker that manages to exploit this vulnerability can use the exposed information as a reconnaissance for further exploitation. This issue affects: Hitachi Energy LinkOne 3.20; 3.22; 3.23; 3.24; 3.25; 3.26.

Credit: cybersecurity@hitachienergy.com

Affected Software	Affected Version	How to fix
Hitachi Linkone	=3.20
Hitachi Linkone	=3.22
Hitachi Linkone	=3.23
Hitachi Linkone	=3.24
Hitachi Linkone	=3.25
Hitachi Linkone	=3.26

Remedy

For each version, apply security patch or update to LinkOne v3.27

Never miss a vulnerability like this again

Reference Links

https://search.abb.com/library/Download.aspx?DocumentID=8DBD000079&LanguageCode=en&DocumentPartId=&Action=Launch

Frequently Asked Questions

What is CVE-2021-40340?
CVE-2021-40340 is an Information Exposure vulnerability in the Hitachi Energy LinkOne application due to a misconfiguration in the ASP server.
What is the severity of CVE-2021-40340?
The severity of CVE-2021-40340 is high, with a CVSS score of 7.5.
How does CVE-2021-40340 impact Hitachi LinkOne?
CVE-2021-40340 exposes server and ASP.net information, which can be used by attackers for reconnaissance and further exploitation.
Which versions of Hitachi LinkOne are affected by CVE-2021-40340?
Versions 3.20, 3.22, 3.23, 3.24, 3.25, and 3.26 of Hitachi LinkOne are affected by CVE-2021-40340.
How can CVE-2021-40340 be fixed?
To fix CVE-2021-40340, it is recommended to apply the necessary patches or updates provided by Hitachi for the affected versions of LinkOne.

collector/nvd-index
agent/softwarecombine
agent/type
agent/author
agent/title
agent/weakness
agent/remedy
agent/references
agent/severity
agent/description
agent/tags
collector/mitre-cve
source/MITRE
agent/last-modified-date
agent/first-publish-date
agent/event
agent/source
vendor/hitachi
canonical/hitachi linkone
version/hitachi linkone/3.20
version/hitachi linkone/3.22
version/hitachi linkone/3.23
version/hitachi linkone/3.24
version/hitachi linkone/3.25
version/hitachi linkone/3.26

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co

By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.