CVE-2021-35531
Remote Code Execution in TXpert Hub CoreTec 4
Vexday Risk Score
3Bajo
Decisión SSVC (CISA)
Track
Sin señal de explotación → monitorear
CVSS —EPSS 0.3%KEV nãoPoC —Nuclei —Metasploit —Patch —
Ciclo de vida
07 jun 2022Publicada en NVD
Recomendación: Monitorear — sin señal de explotación por ahora.
Improper Input Validation vulnerability in a particular configuration setting field of Hitachi Energy TXpert Hub CoreTec 4 product, allows an attacker with access to an authorized user with ADMIN or ENGINEER role rights to inject an OS command that is executed by the system. This issue affects: Hitachi Energy TXpert Hub CoreTec 4 version 2.0.0; 2.0.1; 2.1.0; 2.1.1; 2.1.2; 2.1.3; 2.2.0; 2.2.1.
Productos afectados
Hitachi Energy · TXpert Hub CoreTec 4 version¿Quieres saber si tu infraestructura está expuesta a esto?
Hablar con TrueHacking →