CVE-2021-35531
Assigner: Hitachi Energy
Published: 2022-05-10T00:00:00
State: PUBLISHED
affected: product: TXpert Hub CoreTec 4 version
vendor: Hitachi Energy
versions: status: affected
version: 2.0.0
status: affected
version: 2.0.1
status: affected
version: 2.1.0
status: affected
version: 2.1.1
status: affected
version: 2.1.2
status: affected
version: 2.1.3
status: affected
version: 2.2.0
status: affected
version: 2.2.1
datePublic: 2022-05-10T00:00:00
descriptions: value: Improper Input Validation vulnerability in a particular configuration setting field of Hitachi Energy TXpert Hub CoreTec 4 product, allows an attacker with access to an authorized user with ADMIN or ENGINEER role rights to inject an OS command that is executed by the system. This issue affects: Hitachi Energy TXpert Hub CoreTec 4 version 2.0.0; 2.0.1; 2.1.0; 2.1.1; 2.1.2; 2.1.3; 2.2.0; 2.2.1.
problemTypes: descriptions: cweId: CWE-20
description: CWE-20 Improper Input Validation
type: CWE
solutions: value: Update the system to TXpert Hub CoreTec 4 version 2.3.0 that fixes the issues.
source: discovery: UNKNOWN
title: Remote Code Execution in TXpert Hub CoreTec 4
x_generator: engine: Vulnogram 0.0.9