CVE-2021-35532

A vulnerability exists in the file upload validation part of Hitachi Energy TXpert Hub CoreTec 4 product. The vulnerability allows an attacker or malicious agent who manages to gain access to the system and obtain an account with sufficient privilege to upload a malicious firmware to the product. This issue affects: Hitachi Energy TXpert Hub CoreTec 4 version 2.0.0; 2.0.1; 2.1.0; 2.1.1; 2.1.2; 2.1.3; 2.2.0; 2.2.1.

• CWE-494
• CWE-434

• https://search.abb.com/library/Download.aspx?DocumentID=8DBD000080&LanguageCode=en&DocumentPartId=&Action=Launch&utm_campaign=&utm_content=2022.04_5763_Cybersecurity%20Advisory%20Update_May_03&utm_medium=email&utm_source=EloquaVendor Advisory
• https://search.abb.com/library/Download.aspx?DocumentID=8DBD000080&LanguageCode=en&DocumentPartId=&Action=Launch&utm_campaign=&utm_content=2022.04_5763_Cybersecurity%20Advisory%20Update_May_03&utm_medium=email&utm_source=EloquaVendor Advisory

Published

Jun 7, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-35527Password autocomplete vulnerability in the web application p…7.5
• CVE-2021-35528Improper Access Control vulnerability in the application aut…7.1
• CVE-2021-35529Insufficiently Protected Credentials vulnerability in client…7.2
• CVE-2021-3553A Server-Side Request Forgery (SSRF) vulnerability in the EP…7.5
• CVE-2021-35530A vulnerability in the application authentication and author…6.7
• CVE-2021-35531Improper Input Validation vulnerability in a particular conf…6.7
• CVE-2021-35533Improper Input Validation vulnerability in the APDU parser i…7.5
• CVE-2021-35534Insufficient security control vulnerability in internal data…7.2
• CVE-2021-35535Insecure Boot Image vulnerability in Hitachi Energy Relion R…8.1
• CVE-2021-35536Vulnerability in the Oracle Deal Management product of Oracl…8.1
• CVE-2021-35537Vulnerability in the MySQL Server product of Oracle MySQL (c…4.9
• CVE-2021-35538Vulnerability in the Oracle VM VirtualBox product of Oracle …7.8