CVE-2021-40333CWE-521

Weak default credential associated with TCP port 26

Critical · published December 2, 2021

CVSS v3.1
9.0
EPSS
1%
Percentile
50.7
In the wild
Unconfirmed
What it is

🔥 A weak password requirement allows any attacker to waltz right into your Data Communication Network configuration! 🚪🔓 This vulnerability is like having a front door with a flimsy lock that anyone can pick; it might not be the most obvious entrance, but it's dangerously easy for intruders to slip through. An attacker could gain unauthorized access to critical network configurations, potentially leading to all sorts of chaos! Imagine an intruder adjusting your routing settings—completely compromising the integrity and security of your system. This is absolutely devastating and must be addressed immediately!

Put simply

This vulnerability is like having a front door with a flimsy lock that anyone can pick; it might not be the most obvious entrance, but it's dangerously easy for intruders to slip through. CVE-2021-40333 points to a weak password requirement in Hitachi Energy FOX61x and XCM20, allowing an attacker to access the Data Communication Network routing configuration without proper authentication. This affects versions prior to R15A.

What to do

An attacker could gain unauthorized access to critical network configurations, potentially leading to all sorts of chaos! Imagine an intruder adjusting your routing settings—completely compromising the integrity and security of your system. This is absolutely devastating and must be addressed immediately! To protect your network, update to Hitachi Energy FOX61x and XCM20 version R15A or later immediately! Additionally, enforce strong password policies to bolster your security against unauthorized access. You've got this! Follow these steps, and you’ll have your defenses reinforced in no time. 🛡️

The record
Technical detail
CVSS v3.1
9.0 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00655 · 50.7th percentile
Weakness
CWE-521 · Weak Password Requirements
Published
2021-12-02T18:29Z
EPSS history
Timeline
  • 02 DEC 18:29Z
    Weak default credential associated with TCP port 26
    cvelistv5