// For flags

CVE-2021-40334

SSH activation problem in the proprietary management protocol (port TCP 5558)

Severity Score

7.5
*CVSS v3.1

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

0
*Multiple Sources

Exploited in Wild

-
*KEV

Decision

-
*SSVC
Descriptions

Missing Handler vulnerability in the proprietary management protocol (port TCP 5558) of Hitachi Energy FOX61x, XCM20 allows an attacker that exploits the vulnerability by activating SSH on port TCP 5558 to cause disruption to the NMS and NE communication. This issue affects: Hitachi Energy FOX61x versions prior to R15A. Hitachi Energy XCM20 versions prior to R15A.

Una vulnerabilidad de Manejo Faltante en el protocolo de administración propietario (puerto TCP 5558) de Hitachi Energy FOX61x, XCM20 permite que un atacante que explote la vulnerabilidad al activar SSH en el puerto TCP 5558 para causar una interrupción en la comunicación del NMS y NE. Este problema afecta a: Hitachi Energy FOX61x versiones anteriores a la R15A. Hitachi Energy XCM20 versiones anteriores a la R15A

*Credits: N/A
CVSS Scores
Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
None
Integrity
None
Availability
High
Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
Changed
Confidentiality
None
Integrity
None
Availability
High
Attack Vector
Network
Attack Complexity
Low
Authentication
None
Confidentiality
None
Integrity
None
Availability
Partial
* Common Vulnerability Scoring System
SSVC
  • Decision:-
Exploitation
-
Automatable
-
Tech. Impact
-
* Organization's Worst-case Scenario
Timeline
  • 2021-08-31 CVE Reserved
  • 2021-12-02 CVE Published
  • 2024-08-08 EPSS Updated
  • 2024-09-16 CVE Updated
  • ---------- Exploited in Wild
  • ---------- KEV Due Date
  • ---------- First Exploit
CWE
  • CWE-431: Missing Handler
CAPEC
Affected Vendors, Products, and Versions
Vendor Product Version Other Status
Vendor Product Version Other Status <-- --> Vendor Product Version Other Status
Hitachienergy
Search vendor "Hitachienergy"
 Fox615 Firmware
Search vendor "Hitachienergy" for product "Fox615 Firmware"
 < r15a
Search vendor "Hitachienergy" for product "Fox615 Firmware" and version " < r15a"
-
Affected
in Hitachienergy
Search vendor "Hitachienergy"
 Fox615
Search vendor "Hitachienergy" for product "Fox615"
--
Safe
Hitachienergy
Search vendor "Hitachienergy"
 Xcm20 Firmware
Search vendor "Hitachienergy" for product "Xcm20 Firmware"
 < r15a
Search vendor "Hitachienergy" for product "Xcm20 Firmware" and version " < r15a"
-
Affected
in Hitachienergy
Search vendor "Hitachienergy"
 Xcm20
Search vendor "Hitachienergy" for product "Xcm20"
--
Safe