Hitachi Linkone vulnerabilities

4 CVEs affecting Hitachi Linkone, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2021-40340, published 2022-01-28.

More from Hitachi.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2021-40340, published 2022-01-28. High severity, CVSS 7.5. EPSS: 0.7% chance of exploitation in the next 30 days. Information Exposure vulnerability in Hitachi Energy LinkOne application, due to a misconfiguration in the ASP server exposes server and ASP.net information, an attacker that manages to exploit this…
• CVE-2021-40339, published 2022-01-28. High severity, CVSS 7.5. EPSS: 0.7% chance of exploitation in the next 30 days. Configuration vulnerability in Hitachi Energy LinkOne application due to the lack of HTTP Headers, allows an attacker that manages to exploit this vulnerability to retrieve sensitive information.…
• CVE-2021-40338, published 2022-01-28. Medium severity, CVSS 5.3. EPSS: 0.7% chance of exploitation in the next 30 days. Hitachi Energy LinkOne product, has a vulnerability due to a web server misconfiguration, that enables debug mode and reveals the full path of the filesystem directory when an attacker generates…
• CVE-2021-40337, published 2022-01-25. Medium severity, CVSS 5.4. EPSS: 0.4% chance of exploitation in the next 30 days. Cross-site Scripting (XSS) vulnerability in Hitachi Energy LinkOne allows an attacker that manages to exploit the vulnerability can take advantage to exploit multiple web attacks and stole sensitive…