CVE-2021-40341CWE-326

Weak DES encryption

High · published January 5, 2023

CVSS v3.1
7.1
EPSS
0%
Percentile
0.3
In the wild
Unconfirmed
What it is

DES cipher, which has inadequate encryption strength, is used Hitachi Energy FOXMAN-UN to encrypt user credentials used to access the Network Elements. Successful exploitation allows sensitive information to be decrypted easily. This issue affects

* FOXMAN-UN product: FOXMAN-UN R16A, FOXMAN-UN R15B, FOXMAN-UN R15A, FOXMAN-UN R14B, FOXMAN-UN R14A, FOXMAN-UN R11B, FOXMAN-UN R11A, FOXMAN-UN R10C, FOXMAN-UN R9C;

* UNEM product: UNEM R16A, UNEM R15B, UNEM R15A, UNEM R14B, UNEM R14A, UNEM R11B, UNEM R11A, UNEM R10C, UNEM R9C.

List of CPEs:

* cpe:2.3:a:hitachienergy:foxman-un:R16A:*:*:*:*:*:*:*

* cpe:2.3:a:hitachienergy:foxman-un:R15B:*:*:*:*:*:*:*

* cpe:2.3:a:hitachienergy:foxman-un:R15A:*:*:*:*:*:*:*

* cpe:2.3:a:hitachienergy:foxman-un:R14B:*:*:*:*:*:*:*

* cpe:2.3:a:hitachienergy:foxman-un:R14A:*:*:*:*:*:*:*

* cpe:2.3:a:hitachienergy:foxman-un:R11B:*:*:*:*:*:*:*

* cpe:2.3:a:hitachienergy:foxman-un:R11A:*:*:*:*:*:*:*

* cpe:2.3:a:hitachienergy:foxman-un:R10C:*:*:*:*:*:*:*

* cpe:2.3:a:hitachienergy:foxman-un:R9C:*:*:*:*:*:*:*

* cpe:2.3:a:hitachienergy:unem:R16A:*:*:*:*:*:*:*

* cpe:2.3:a:hitachienergy:unem:R15B:*:*:*:*:*:*:*

* cpe:2.3:a:hitachienergy:unem:R15A:*:*:*:*:*:*:*

* cpe:2.3:a:hitachienergy:unem:R14B:*:*:*:*:*:*:*

* cpe:2.3:a:hitachienergy:unem:R14A:*:*:*:*:*:*:*

* cpe:2.3:a:hitachienergy:unem:R11B:*:*:*:*:*:*:*

* cpe:2.3:a:hitachienergy:unem:R11A:*:*:*:*:*:*:*

* cpe:2.3:a:hitachienergy:unem:R10C:*:*:*:*:*:*:*

* cpe:2.3:a:hitachienergy:unem:R9C:*:*:*:*:*:*:*

The record
Technical detail
CVSS v3.1
7.1 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00087 · 0.3th percentile
Weakness
CWE-326 · Inadequate Encryption Strength
Published
2023-01-05T21:26Z
EPSS history
Timeline
  • 05 JAN 21:26Z
    Weak DES encryption
    cvelistv5