CVE-2021-35531CWE-20

Remote Code Execution in TXpert Hub CoreTec 4

published June 7, 2022

CVSS
—
EPSS
0%
Percentile
16.7
In the wild
Unconfirmed
What it is

Improper Input Validation vulnerability in a particular configuration setting field of Hitachi Energy TXpert Hub CoreTec 4 product, allows an attacker with access to an authorized user with ADMIN or ENGINEER role rights to inject an OS command that is executed by the system. This issue affects: Hitachi Energy TXpert Hub CoreTec 4 version 2.0.0; 2.0.1; 2.1.0; 2.1.1; 2.1.2; 2.1.3; 2.2.0; 2.2.1.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00260 · 16.7th percentile
Weakness
CWE-20 · Improper Input Validation
Published
2022-06-07T20:07Z
EPSS history
Timeline
  • 07 JUN 20:07Z
    Remote Code Execution in TXpert Hub CoreTec 4
    cvelistv5