CVE-2021-35531— Remote Code Execution in TXpert Hub CoreTec 4
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2021-35531
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Remote Code Execution in TXpert Hub CoreTec 4
Source: NVD (National Vulnerability Database)
Vulnerability Description
Improper Input Validation vulnerability in a particular configuration setting field of Hitachi Energy TXpert Hub CoreTec 4 product, allows an attacker with access to an authorized user with ADMIN or ENGINEER role rights to inject an OS command that is executed by the system. This issue affects: Hitachi Energy TXpert Hub CoreTec 4 version 2.0.0; 2.0.1; 2.1.0; 2.1.1; 2.1.2; 2.1.3; 2.2.0; 2.2.1.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
输入验证不恰当
Source: NVD (National Vulnerability Database)
Vulnerability Title
Hitachi Energy TXpert Hub CoreTec 4 操作系统命令注入漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Hitachi Energy TXpert Hub CoreTec 4是日本日立制作所（Hitachi）公司的一种数字变压器监控和诊断设备。 Hitachi Energy TXpert Hub CoreTec 4存在操作系统命令注入漏洞，该漏洞源于产品的特定配置设置字段中的不正确输入验证。攻击者利用该漏洞可以访问具有 ADMIN 或 ENGINEER 角色权限的授权用户来注入由系统执行的操作系统命令。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| Hitachi Energy | TXpert Hub CoreTec 4 version | 2.0.0 | - |
II. Public POCs for CVE-2021-35531
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2021-35531
请登录查看更多情报信息。
Same Patch Batch · Hitachi Energy · 2022-06-07 · 3 CVEs total
| CVE-2021-35530 | 6.0 MEDIUM | User authentication bypass in TXpert Hub CoreTec 4 |
| CVE-2021-35532 | Firmware upload verification bypass in TXpert Hub CoreTec 4 |
IV. Related Vulnerabilities
V. Comments for CVE-2021-35531
No comments yet