CVE-2021-40333 : Security Advisory and Response
Learn about CVE-2021-40333, a Critical vulnerability in Hitachi Energy FOX61x and XCM20 versions prior to R15A, allowing unauthorized access to DCN routing configuration. Find mitigation steps here.
This CVE-2021-40333 article provides an overview of a Weak Password Requirements vulnerability affecting Hitachi Energy FOX61x and XCM20.
Understanding CVE-2021-40333
CVE-2021-40333 is related to a Weak Password Requirements vulnerability that allows unauthorized access to the Data Communication Network (DCN) routing configuration in Hitachi Energy FOX61x and XCM20.
What is CVE-2021-40333?
The vulnerability enables attackers to gain unauthorized access to the DCN routing configuration by exploiting weak password requirements in Hitachi Energy FOX61x and XCM20 versions prior to R15A.
The Impact of CVE-2021-40333
The vulnerability's CVSS base score is 9.0 (Critical severity) with a LOW attack complexity, HIGH availability impact, LOW confidentiality impact, and HIGH integrity impact. Privileges are required for exploitation, and the scope of impact is CHANGED with no user interaction needed.
Technical Details of CVE-2021-40333
The technical details provide insights into the vulnerability, affected systems, and exploitation mechanisms.
Vulnerability Description
The Weak Password Requirements vulnerability in Hitachi Energy FOX61x and XCM20 versions prior to R15A allows attackers to gain unauthorized access to the DCN routing configuration.
Affected Systems and Versions
- Products: FOX61x, XCM20
- Vendor: Hitachi Energy
- Vulnerable Versions: Prior to R15A
Exploitation Mechanism
The vulnerability can be exploited by attackers to compromise the DCN routing configuration using weak password requirements.
Mitigation and Prevention
Leaders can take immediate steps and employ long-term security practices to mitigate the risks associated with CVE-2021-40333.
Immediate Steps to Take
- Apply the FOX61x R14A Hotfix or XMC20 R14A Hotfix
- Update to FOX61x R15A or XMC20 R15A
Long-Term Security Practices
- Implement recommended security practices and firewall configurations
- Physically protect network management systems and XMC20 networks
- Separate networks with minimal exposed ports and block/drop traffic to TCP port 26
- Scan portable computers and storage media for viruses before connecting to a control system
Patching and Updates
- Ensure systems are updated to the fixed versions to prevent exploitation of the vulnerability.