CVE-2023-2625
CVE.org · Published
- Record status
- Published
- Identifier year (not publication year)
- 2023
- Source publication
- Source updated
- Imported by cveboard
- Source snapshot
- cve_2026-10-24_midnight_baseline ·
CNA source text (English)
A vulnerability exists that can be exploited by an authenticated client that is connected to the same network segment as the CoreTec 4, having any level of access VIEWER to ADMIN. To exploit the vulnerability the attacker can inject shell commands through a particular field of the web user interface that will be executed by the system.
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
TXpert Hub CoreTec 4
- Vendor
- Hitachi Energy
- Product
- TXpert Hub CoreTec 4
- Platforms
- Unknown
- Default status
unaffected
| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|---|---|---|---|---|
| TXpert Hub CoreTec 4 version 2.0.* | affected | Unavailable | Unavailable | Unavailable | None listed |
| TXpert Hub CoreTec 4 version 2.1.* | affected | Unavailable | Unavailable | Unavailable | None listed |
| TXpert Hub CoreTec 4 version 2.2.* | affected | Unavailable | Unavailable | Unavailable | None listed |
| TXpert Hub CoreTec 4 version 2.3.* | affected | Unavailable | Unavailable | Unavailable | None listed |
| TXpert Hub CoreTec 4 version 2.4.* | affected | Unavailable | Unavailable | Unavailable | None listed |
| TXpert Hub CoreTec 4 version 3.0.1 | unaffected | Unavailable | Unavailable | Unavailable | None listed |