CVE-2021-40341

CVSS V2 None CVSS V3 None
Description
DES cipher, which has inadequate encryption strength, is used Hitachi Energy FOXMAN-UN to encrypt user credentials used to access the Network Elements. Successful exploitation allows sensitive information to be decrypted easily. This issue affects * FOXMAN-UN product: FOXMAN-UN R16A, FOXMAN-UN R15B, FOXMAN-UN R15A, FOXMAN-UN R14B, FOXMAN-UN R14A, FOXMAN-UN R11B, FOXMAN-UN R11A, FOXMAN-UN R10C, FOXMAN-UN R9C; * UNEM product: UNEM R16A, UNEM R15B, UNEM R15A, UNEM R14B, UNEM R14A, UNEM R11B, UNEM R11A, UNEM R10C, UNEM R9C. List of CPEs: * cpe:2.3:a:hitachienergy:foxman-un:R16A:*:*:*:*:*:*:* * cpe:2.3:a:hitachienergy:foxman-un:R15B:*:*:*:*:*:*:* * cpe:2.3:a:hitachienergy:foxman-un:R15A:*:*:*:*:*:*:* * cpe:2.3:a:hitachienergy:foxman-un:R14B:*:*:*:*:*:*:* * cpe:2.3:a:hitachienergy:foxman-un:R14A:*:*:*:*:*:*:* * cpe:2.3:a:hitachienergy:foxman-un:R11B:*:*:*:*:*:*:* * cpe:2.3:a:hitachienergy:foxman-un:R11A:*:*:*:*:*:*:* * cpe:2.3:a:hitachienergy:foxman-un:R10C:*:*:*:*:*:*:* * cpe:2.3:a:hitachienergy:foxman-un:R9C:*:*:*:*:*:*:* * cpe:2.3:a:hitachienergy:unem:R16A:*:*:*:*:*:*:* * cpe:2.3:a:hitachienergy:unem:R15B:*:*:*:*:*:*:* * cpe:2.3:a:hitachienergy:unem:R15A:*:*:*:*:*:*:* * cpe:2.3:a:hitachienergy:unem:R14B:*:*:*:*:*:*:* * cpe:2.3:a:hitachienergy:unem:R14A:*:*:*:*:*:*:* * cpe:2.3:a:hitachienergy:unem:R11B:*:*:*:*:*:*:* * cpe:2.3:a:hitachienergy:unem:R11A:*:*:*:*:*:*:* * cpe:2.3:a:hitachienergy:unem:R10C:*:*:*:*:*:*:* * cpe:2.3:a:hitachienergy:unem:R9C:*:*:*:*:*:*:*
Overview
  • CVE ID
  • CVE-2021-40341
  • Assigner
  • cybersecurity@hitachienergy.com
  • Vulnerability Status
  • Analyzed
  • Published Version
  • 2023-01-05T22:15:08
  • Last Modified Date
  • 2023-02-06T14:29:32
Weakness Enumerations
CWE URL
CWE-326 http://cwe.mitre.org/data/definitions/326.html
CPE Configuration (Product)
CPE Vulnerable Operator Version Start Version End
cpe:2.3:a:hitachi:foxman-un:r9c:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:hitachi:foxman-un:r10c:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:hitachi:foxman-un:r11a:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:hitachi:foxman-un:r11b:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:hitachi:foxman-un:r14a:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:hitachi:foxman-un:r14b:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:hitachi:foxman-un:r15a:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:hitachi:foxman-un:r15b:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:hitachi:foxman-un:r16a:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:hitachi:unem:r9c:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:hitachi:unem:r10c:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:hitachi:unem:r11a:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:hitachi:unem:r11b:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:hitachi:unem:r14a:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:hitachi:unem:r14b:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:hitachi:unem:r15a:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:hitachi:unem:r15b:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:hitachi:unem:r16a:*:*:*:*:*:*:* 1 OR
References
Reference URL Reference Tags
https://search.abb.com/library/Download.aspx?DocumentID=8DBD000083&LanguageCode=en&DocumentPartId=&Action=Launch
https://search.abb.com/library/Download.aspx?DocumentID=8DBD000084&LanguageCode=en&DocumentPartId=&Action=Launch
Sources
Source Name Source URL
NIST https://nvd.nist.gov/vuln/detail/CVE-2021-40341
MITRE https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-40341
History
Created Old Value New Value Data Type Notes
2023-01-05 22:19:18 Added to TrackCVE
2023-01-05 22:19:18 Weakness Enumeration new
2023-01-06 00:26:31 2023-01-05T23:20:46 CVE Modified Date updated
2023-01-06 00:26:31 Received Awaiting Analysis Vulnerability Status updated
2023-01-10 21:18:26 Awaiting Analysis Undergoing Analysis Vulnerability Status updated
2023-01-12 16:16:53 2023-01-12T15:44:21 CVE Modified Date updated
2023-01-12 16:16:53 Undergoing Analysis Analyzed Vulnerability Status updated
2023-01-12 16:16:55 CPE Information updated
2023-01-23 21:13:16 2023-01-23T19:36:51 CVE Modified Date updated
2023-01-23 21:13:16 Analyzed Undergoing Analysis Vulnerability Status updated
2023-02-06 15:23:31 2023-02-06T14:29:32 CVE Modified Date updated
2023-02-06 15:23:31 Undergoing Analysis Analyzed Vulnerability Status updated