Summary
Successful exploitation of these vulnerabilities could allow an attacker to gain unauthorized access to the Data Communication Network (DCN) routing configuration and cause a disruption to the Network Management (NMS) and Network Element (NE) communication.
Vulnerabilities 2
-
Critical 9.0
Weak default credential associated with TCP port 26
Weak Password Requirements vulnerability in Hitachi Energy FOX61x, XCM20 allows an attacker to gain unauthorized access to the Data Communication Network (DCN) routing configuration. This issue affects: Hitachi Energy FOX61x versions prior to R15A. Hitachi En…
-
High 8.6
SSH activation problem in the proprietary management protocol (port TCP 5558)
Missing Handler vulnerability in the proprietary management protocol (port TCP 5558) of Hitachi Energy FOX61x, XCM20 allows an attacker that exploits the vulnerability by activating SSH on port TCP 5558 to cause disruption to the NMS and NE communication. Thi…
Revision history
-
#1
ICSA-21-341-02 Hitachi Energy XMC20 and FOX61x
References
-
ICS Advisory ICSA-21-341-02 Web Version
https://www.cisa.gov/news-events/ics-advisories/icsa-21-341-02
-
Recommended Practices
https://www.cisa.gov/news-events/ics-advisories/icsa-21-341-02
-
Recommended Practices
https://us-cert.cisa.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf
-
Recommended Practices
https://us-cert.cisa.gov/ics/tips/ICS-TIP-12-146-01B