A vulnerability in the application authentication and authorization mechanism in Hitachi Energy's TXpert Hub CoreTec 4, that depends on a token validation of the session identifier, allows an unauthorized modified message to be executed in the server enabling an unauthorized actor to change an existing user password, and further gain authorized access into the system via login mechanism. This issue affects: Hitachi Energy TXpert Hub CoreTec 4 version 2.0.0 2.1.0; 2.1.0; 2.1.1; 2.1.2; 2.1.3; 2.2.0; 2.2.1.
Una vulnerabilidad en el mecanismo de autenticación y autorización de la aplicación TXpert Hub CoreTec 4 de Hitachi Energy, que depende de la comprobación del identificador de sesión, permite que sea ejecutado un mensaje modificado no autorizado en el servidor, lo que permite a un actor no autorizado cambiar una contraseña de usuario existente y, además, conseguir acceso autorizado al sistema por medio del mecanismo de inicio de sesión. Este problema afecta a: Hitachi Energy TXpert Hub CoreTec 4 versiones 2.0.0; 2.1.0; 2.1.1; 2.1.2; 2.1.3; 2.2.0; 2.2.1
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
| Attack Vector | LOCAL |
|---|---|
| Attack Complexity | LOW |
| Privileges Required | HIGH |
| User Interaction | NONE |
| Scope | UNCHANGED |
| Confidentiality Impact | HIGH |
| Integrity Impact | HIGH |
| Availability Impact | HIGH |
AV:L/AC:L/Au:N/C:C/I:C/A:C
| Access Vector | LOCAL |
|---|---|
| Access Complexity | LOW |
| Authentication | NONE |
| Confidentiality Impact | COMPLETE |
| Integrity Impact | COMPLETE |
| Availability Impact | COMPLETE |
| Source | Type | Description |
|---|---|---|
| [email protected] | Secondary |
en
CWE-288
|
| [email protected] | Primary |
en
NVD-CWE-Other
|
| Vendor | Product | Version | Update | Type |
|---|---|---|---|---|
| hitachienergy | txpert_hub_coretec_4_firmware | 2.0.0 | <built-in method update of dict object at 0x72a9b092bfc0> | Operating System |
| hitachienergy | txpert_hub_coretec_4_firmware | 2.0.1 | <built-in method update of dict object at 0x72a9b092a880> | Operating System |
| hitachienergy | txpert_hub_coretec_4_firmware | 2.1.0 | <built-in method update of dict object at 0x72a9cd0793c0> | Operating System |
| hitachienergy | txpert_hub_coretec_4_firmware | 2.1.1 | <built-in method update of dict object at 0x72a9cc62c940> | Operating System |
| hitachienergy | txpert_hub_coretec_4_firmware | 2.1.2 | <built-in method update of dict object at 0x72a9b0928380> | Operating System |
| hitachienergy | txpert_hub_coretec_4_firmware | 2.1.3 | <built-in method update of dict object at 0x72a9b092b3c0> | Operating System |
| hitachienergy | txpert_hub_coretec_4_firmware | 2.2.0 | <built-in method update of dict object at 0x72a9ccf89b40> | Operating System |
| hitachienergy | txpert_hub_coretec_4_firmware | 2.2.1 | <built-in method update of dict object at 0x72a9cd07bc00> | Operating System |
| Vulnerable | CPE |
|---|---|
| Yes | cpe:2.3:o:hitachienergy:txpert_hub_coretec_4_firmware:2.0.0:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:hitachienergy:txpert_hub_coretec_4_firmware:2.0.1:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:hitachienergy:txpert_hub_coretec_4_firmware:2.1.0:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:hitachienergy:txpert_hub_coretec_4_firmware:2.1.1:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:hitachienergy:txpert_hub_coretec_4_firmware:2.1.2:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:hitachienergy:txpert_hub_coretec_4_firmware:2.1.3:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:hitachienergy:txpert_hub_coretec_4_firmware:2.2.0:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:hitachienergy:txpert_hub_coretec_4_firmware:2.2.1:*:*:*:*:*:*:* |
| Vulnerable | CPE |
|---|---|
| No | cpe:2.3:h:hitachienergy:txpert_hub_coretec_4:-:*:*:*:*:*:*:* |