Vulnerability · Published Jun 7, 2022 · Assigned by Hitachi Energy
CVE-2021-35532Firmware upload verification bypass in TXpert Hub CoreTec 4
Medium 6.7
In plain English
A medium-severity security flaw in TXpert Hub CoreTec 4 version from Hitachi Energy. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 6% of all known vulnerabilities).
Official description
A vulnerability exists in the file upload validation part of Hitachi Energy TXpert Hub CoreTec 4 product. The vulnerability allows an attacker or malicious agent who manages to gain access to the system and obtain an account with sufficient privilege to upload a malicious firmware to the product. This issue affects: Hitachi Energy TXpert Hub CoreTec 4 version 2.0.0; 2.0.1; 2.1.0; 2.1.1; 2.1.2; 2.1.3; 2.2.0; 2.2.1.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Hitachi Energy | TXpert Hub CoreTec 4 version | 2.0.02.0.12.1.02.1.12.1.22.1.32.2.02.2.1 |
Weakness: CWE-494