Hitachienergy FOX615 Firmware vulnerabilities

2 CVEs affecting Hitachienergy FOX615 Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2021-40334, published 2021-12-02.

More from Hitachienergy.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2021-40334, published 2021-12-02. High severity, CVSS 7.5. EPSS: 1% chance of exploitation in the next 30 days. Missing Handler vulnerability in the proprietary management protocol (port TCP 5558) of Hitachi Energy FOX61x, XCM20 allows an attacker that exploits the vulnerability by activating SSH on port TCP…
• CVE-2021-40333, published 2021-12-02. High severity, CVSS 7.1. EPSS: 0.7% chance of exploitation in the next 30 days. Weak Password Requirements vulnerability in Hitachi Energy FOX61x, XCM20 allows an attacker to gain unauthorized access to the Data Communication Network (DCN) routing configuration. This issue…