title: Remote Code Execution in TXpert Hub CoreTec 4
description: Improper Input Validation vulnerability in a particular configuration setting field of Hitachi Energy TXpert Hub CoreTec 4 product, allows an attacker with access to an authorized user with ADMIN or ENGINEER role rights to inject an OS command that is executed by the system. This issue affects: Hitachi Energy TXpert Hub CoreTec 4 version 2.0.0; 2.0.1; 2.1.0; 2.1.1; 2.1.2; 2.1.3; 2.2.0; 2.2.1.
problem types: CWE-20 Improper Input Validation
affected:
{
product: TXpert Hub CoreTec 4 version
vendor: Hitachi Energy
versions:
status: affected, version: 2.0.0
status: affected, version: 2.0.1
status: affected, version: 2.1.0
status: affected, version: 2.1.1
status: affected, version: 2.1.2
status: affected, version: 2.1.3
status: affected, version: 2.2.0
status: affected, version: 2.2.1
}
solutions: Update the system to TXpert Hub CoreTec 4 version 2.3.0 that fixes the issues.