← Back

CVE-2021-40334

nvd nist
Published: Dec 2, 2021Modified: Jun 17, 2026

JSON object

Loading...
7.5
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Exploitability: 3.9 / Impact: 3.6
Source: NVD

Description

Missing Handler vulnerability in the proprietary management protocol (port TCP 5558) of Hitachi Energy FOX61x, XCM20 allows an attacker that exploits the vulnerability by activating SSH on port TCP 5558 to cause disruption to the NMS and NE communication. This issue affects: Hitachi Energy FOX61x versions prior to R15A. Hitachi Energy XCM20 versions prior to R15A.

Affected (2)

Hitachienergy
2 products
Fox615 Firmware
Xcm20 Firmware
Configuration A
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Fox615 Firmware
Before r15a
Running on/withPlatform Versions
Hitachienergy
Fox615
All versions
Configuration B
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Xcm20 Firmware
Before r15a
Running on/withPlatform Versions
Hitachienergy
Xcm20
All versions

Related CWEs

CWE-431
Missing Handler
A handler is not available or implemented.

References (4)

Source: cybersecurity@hitachienergy.com
Vendor Advisory
Source: cybersecurity@hitachienergy.com
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory

Timeline

No history available yet.