Vulnerability Details : CVE-2021-40341
DES cipher, which has inadequate encryption strength, is used Hitachi Energy FOXMAN-UN to encrypt user credentials used to access the Network Elements. Successful exploitation allows sensitive information to be decrypted easily. This issue affects * FOXMAN-UN product: FOXMAN-UN R16A, FOXMAN-UN R15B, FOXMAN-UN R15A, FOXMAN-UN R14B, FOXMAN-UN R14A, FOXMAN-UN R11B, FOXMAN-UN R11A, FOXMAN-UN R10C, FOXMAN-UN R9C; * UNEM product: UNEM R16A, UNEM R15B, UNEM R15A, UNEM R14B, UNEM R14A, UNEM R11B, UNEM R11A, UNEM R10C, UNEM R9C. List of CPEs: * cpe:2.3:a:hitachienergy:foxman-un:R16A:*:*:*:*:*:*:* * cpe:2.3:a:hitachienergy:foxman-un:R15B:*:*:*:*:*:*:* * cpe:2.3:a:hitachienergy:foxman-un:R15A:*:*:*:*:*:*:* * cpe:2.3:a:hitachienergy:foxman-un:R14B:*:*:*:*:*:*:* * cpe:2.3:a:hitachienergy:foxman-un:R14A:*:*:*:*:*:*:* * cpe:2.3:a:hitachienergy:foxman-un:R11B:*:*:*:*:*:*:* * cpe:2.3:a:hitachienergy:foxman-un:R11A:*:*:*:*:*:*:* * cpe:2.3:a:hitachienergy:foxman-un:R10C:*:*:*:*:*:*:* * cpe:2.3:a:hitachienergy:foxman-un:R9C:*:*:*:*:*:*:* * cpe:2.3:a:hitachienergy:unem:R16A:*:*:*:*:*:*:* * cpe:2.3:a:hitachienergy:unem:R15B:*:*:*:*:*:*:* * cpe:2.3:a:hitachienergy:unem:R15A:*:*:*:*:*:*:* * cpe:2.3:a:hitachienergy:unem:R14B:*:*:*:*:*:*:* * cpe:2.3:a:hitachienergy:unem:R14A:*:*:*:*:*:*:* * cpe:2.3:a:hitachienergy:unem:R11B:*:*:*:*:*:*:* * cpe:2.3:a:hitachienergy:unem:R11A:*:*:*:*:*:*:* * cpe:2.3:a:hitachienergy:unem:R10C:*:*:*:*:*:*:* * cpe:2.3:a:hitachienergy:unem:R9C:*:*:*:*:*:*:*
Exploit prediction scoring system (EPSS) score for CVE-2021-40341
Probability of exploitation activity in the next 30 days: 0.04%
Percentile, the proportion of vulnerabilities that are scored at or less: ~ 7 % EPSS Score History EPSS FAQ
CVSS scores for CVE-2021-40341
| Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source |
|---|---|---|---|---|---|
|
7.1
|
HIGH | CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N |
2.5
|
4.0
|
Hitachi ABB Power Grids |
|
5.5
|
MEDIUM | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N |
1.8
|
3.6
|
NIST |
CWE ids for CVE-2021-40341
-
The product stores or transmits sensitive data using an encryption scheme that is theoretically sound, but is not strong enough for the level of protection required.Assigned by:
- cybersecurity@hitachienergy.com (Secondary)
- nvd@nist.gov (Primary)
References for CVE-2021-40341
Products affected by CVE-2021-40341
- cpe:2.3:a:hitachienergy:unem:r15b:*:*:*:*:*:*:*
- cpe:2.3:a:hitachienergy:unem:r15a:*:*:*:*:*:*:*
- cpe:2.3:a:hitachienergy:unem:r14b:*:*:*:*:*:*:*
- cpe:2.3:a:hitachienergy:unem:r14a:*:*:*:*:*:*:*
- cpe:2.3:a:hitachienergy:unem:r11b:*:*:*:*:*:*:*
- cpe:2.3:a:hitachienergy:unem:r11a:*:*:*:*:*:*:*
- cpe:2.3:a:hitachienergy:unem:r10c:*:*:*:*:*:*:*
- cpe:2.3:a:hitachienergy:unem:r9c:*:*:*:*:*:*:*
- cpe:2.3:a:hitachienergy:unem:r16a:*:*:*:*:*:*:*
- cpe:2.3:a:hitachienergy:foxman-un:r15b:*:*:*:*:*:*:*
- cpe:2.3:a:hitachienergy:foxman-un:r15a:*:*:*:*:*:*:*
- cpe:2.3:a:hitachienergy:foxman-un:r14b:*:*:*:*:*:*:*
- cpe:2.3:a:hitachienergy:foxman-un:r14a:*:*:*:*:*:*:*
- cpe:2.3:a:hitachienergy:foxman-un:r11b:*:*:*:*:*:*:*
- cpe:2.3:a:hitachienergy:foxman-un:r11a:*:*:*:*:*:*:*
- cpe:2.3:a:hitachienergy:foxman-un:r10c:*:*:*:*:*:*:*
- cpe:2.3:a:hitachienergy:foxman-un:r9c:*:*:*:*:*:*:*
- cpe:2.3:a:hitachienergy:foxman-un:r16a:*:*:*:*:*:*:*