User authentication bypass in TXpert Hub CoreTec 4

Description

A vulnerability in the application authentication and authorization mechanism in Hitachi Energy's TXpert Hub CoreTec 4, that depends on a token validation of the session identifier, allows an unauthorized modified message to be executed in the server enabling an unauthorized actor to change an existing user password, and further gain authorized access into the system via login mechanism. This issue affects: Hitachi Energy TXpert Hub CoreTec 4 version 2.0.0 2.1.0; 2.1.0; 2.1.1; 2.1.2; 2.1.3; 2.2.0; 2.2.1.

Scores

EPSS (exploitation in 30 days)

0.22% · top 87% of all CVEs (5 Nov 2026)

The list uses the assigner's score when there is one, then CISA's, then NVD's: Medium 6.0.

Weakness

• CWE-288 Authentication Bypass Using an Alternate Path or Channel (opens in a new tab)All about CWE-288 and its CVEs

Affected products

• Hitachi Energy · TXpert Hub CoreTec 4 version

  • affected 2.0.0
  • affected 2.0.1
  • affected 2.1.0
  • affected 2.1.1
  • affected 2.1.2
  • affected 2.1.3
  • affected 2.2.0
  • affected 2.2.1

What to do

Solution: Update the system to TXpert Hub CoreTec 4 version 2.3.0 that fixes the issues.

References (1)

• https://search.abb.com/library/Download.aspx?DocumentID=8DBD000080&LanguageCode=en&DocumentPartId=&Action=Launch&utm_campaign=&utm_content=2022.04_5763_Cybersecurity%20Advisory%20Update_May_03&utm_medium=email&utm_source=Eloqua (opens in a new tab)x_refsource_CONFIRMx_transferred

Sources

The same CVE in the primary databases and aggregators, to check against.

• CVE.org record (opens in a new tab)
• CVE List JSON (GitHub) (opens in a new tab)
• NVD (opens in a new tab)
• FIRST EPSS (opens in a new tab)
• OSV.dev (opens in a new tab)
• GitHub Advisories (opens in a new tab)
• CIRCL Vulnerability-Lookup (opens in a new tab)

Badge for a README or a ticket

[![CVE-2021-35530](https://trackcve.app/badge/CVE-2021-35530.svg)](https://trackcve.app/cve/CVE-2021-35530)

Record last updated 16 Sept 2024, 23:26 UTC.