Medium

DATE	CVE	VULNERABILITY TITLE	RISK
2022-06-07	CVE-2021-35530	Unspecified vulnerability in Hitachienergy Txpert HUB Coretec 4 Firmware A vulnerability in the application authentication and authorization mechanism in Hitachi Energy's TXpert Hub CoreTec 4, that depends on a token validation of the session identifier, allows an unauthorized modified message to be executed in the server enabling an unauthorized actor to change an existing user password, and further gain authorized access into the system via login mechanism. local low complexity hitachienergy	6.7
2022-06-07	CVE-2021-35531	OS Command Injection vulnerability in Hitachienergy Txpert HUB Coretec 4 Firmware Improper Input Validation vulnerability in a particular configuration setting field of Hitachi Energy TXpert Hub CoreTec 4 product, allows an attacker with access to an authorized user with ADMIN or ENGINEER role rights to inject an OS command that is executed by the system. local low complexity hitachienergy CWE-78	6.7