What’s Vulnerable › Vulnerabilities

CVE-2021-40334: SSH activation problem in the proprietary management protocol (port TCP 5558)

• Severity: high (CVSS 7.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.0% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2021-12-02 · updated 2026-06-17
• Weakness: CWE-431

Description

Missing Handler vulnerability in the proprietary management protocol (port TCP 5558) of Hitachi Energy FOX61x, XCM20 allows an attacker that exploits the vulnerability by activating SSH on port TCP 5558 to cause disruption to the NMS and NE communication. This issue affects: Hitachi Energy FOX61x versions prior to R15A. Hitachi Energy XCM20 versions prior to R15A.

Affected products

• Hitachienergy Fox615 Firmware: before r15a — fixed in r15a
• Hitachienergy Xcm20 Firmware: before r15a — fixed in r15a

How to fix

Upgrade to a fixed version: Hitachienergy Fox615 Firmware r15a; Hitachienergy Xcm20 Firmware r15a. Check the vendor advisory for mitigations.

References

• https://search.abb.com/library/Download.aspx?DocumentID=8DBD000062&LanguageCode=en&DocumentPartId=&Action=Launch
• https://search.abb.com/library/Download.aspx?DocumentID=8DBD000069&LanguageCode=en&DocumentPartId=&Action=Launch
• https://search.abb.com/library/Download.aspx?DocumentID=8DBD000062&LanguageCode=en&DocumentPartId=&Action=Launch
• https://search.abb.com/library/Download.aspx?DocumentID=8DBD000069&LanguageCode=en&DocumentPartId=&Action=Launch

Get alerted when CVE-2021-40334 or the next vulnerability affects your stack