← CVE Intelligence

CVE-2023-2625

Hitachi Energy / TXpert Hub CoreTec 4 PUBLISHED

Description (CNA)

A vulnerability exists that can be exploited by an authenticated client that is connected to the same network segment as the CoreTec 4, having any level of access VIEWER to ADMIN. To exploit the vulnerability the attacker can inject shell commands through a particular field of the web user interface that will be executed by the system.

Affected (CNA)

Vendor / productVersions
Hitachi Energy / TXpert Hub CoreTec 4affected TXpert Hub CoreTec 4 version 2.0.*; affected TXpert Hub CoreTec 4 version 2.1.*; affected TXpert Hub CoreTec 4 version 2.2.*; affected TXpert Hub CoreTec 4 version 2.3.*; affected TXpert Hub CoreTec 4 version 2.4.*; unaffected TXpert Hub CoreTec 4 version 3.0.1

CWE

CWE-78

References

ADP enrichment

CVE

No English description supplied.

CISA-ADP

No English description supplied.

No references supplied.