Headline
CVE-2021-35532
A vulnerability exists in the file upload validation part of Hitachi Energy TXpert Hub CoreTec 4 product. The vulnerability allows an attacker or malicious agent who manages to gain access to the system and obtain an account with sufficient privilege to upload a malicious firmware to the product. This issue affects: Hitachi Energy TXpert Hub CoreTec 4 version 2.0.0; 2.0.1; 2.1.0; 2.1.1; 2.1.2; 2.1.3; 2.2.0; 2.2.1.
%PDF-1.7 %���� 1 0 obj <>/Metadata 432 0 R/ViewerPreferences 433 0 R>> endobj 2 0 obj <> endobj 3 0 obj <>/ExtGState<>/Font<>/ProcSet[/PDF/Text/ImageB/ImageC/ImageI] >>/MediaBox[ 0 0 595.32 842.04] /Contents 4 0 R/Group<>/Tabs/S/StructParents 0>> endobj 4 0 obj <> stream x��\Ko 7� ��c��(� �0��ȓ�"�k99h E�%�W{��,���n�fز(��U��W ��\��>}�����puu�~z�����?���ǧ��Ͽ_�������o�?=�>}z|�|��>���������j�\o�˟����?�g�>?�#)�0ǔҁ�� �����췿 �g)L���_d��j(�"����g�o�n�p�8��DÛ�V܄�7�_����� Ia���h���C� 4�V�B�͍�#�DF7�����@��|�X"b�X��p�%�i�����>\a���Pj?Q �\3���O�5Y]#����Q�u����x��~ n�v~�ƪ�ι�%ӣ��#�!,���’����q�^�ڴ�}Ϛz�X�%+�dy�l���V�2=�W ,�ܤ�:\Qs�$�W�;�i ���m����d��"��0��]I�ӾYB��P6#��h3��U1d���K�H�W��&����’[�ހ˕tc �����w�#��ȸ��)!�������4�6�����Zj�r��#�!Ҟ D���~7��F�-I6�h����K��qq9m������Bhg����t�� i$ԄO�H�ea�� ŀ �tiI7 ���c/���’��dza�Y�Ba�L�/�5�� ]'�lG1���@�U��D��i� %16��#l��fQ��$9�����K��F��H>��bđ ��f�5JC*����,AQ�ńO����E+�����AHw����%:aC�2�L�@�<�� �9��P|�!=��p� ���4��I�P���>��%� �O0��&��*V�|k��g㟵��Q��k�^���?��i���Ф���;�����w���`u���� ���3;