TI-2023-02454 Aliases CVE-2023-2625 GHSA-22m4-69fv-5rj6

OS command injection in Hitachi Energy TXpert Hub CoreTec 4

MEDIUM 41CWE-78Published 2023-06-28 · Updated 2024-12-04

Key facts

Attack vector: Adjacent network
Privileges required: Low
User interaction: None
Attack complexity: Low
Impact type: Code execution
Confidentiality · integrity · availability: High · High · High
Fix status: Fixed

Attack profile from CVSS 3.1 · CNA. Fix status from CNA. Impact type from CWE-78.

Summary

A vulnerability exists that can be exploited by an authenticated client that is connected to the same network segment as the CoreTec 4, having any level of access VIEWER to ADMIN. To exploit the vulnerability the attacker can inject shell commands through a particular field of the web user interface that will be executed by the system.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV

EPSS 0.00478 41st percentileScored 2026-11-07

Fix Fixed TXpert Hub CoreTec 4 (Hitachi Energy): TXpert Hub CoreTec 4 version 3.0.1

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation: None
Automatable: No
Technical impact: Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

Vendor	Product	Affected versions	Fixed in	Status	Source
Hitachi Energy	TXpert Hub CoreTec 4	all versions; all versions; all versions; all versions; all versions	TXpert Hub CoreTec 4 version 3.0.1	Patch available	CNA

TXpert Hub CoreTec 4 VendorHitachi Energy Affected all versions; all versions; all versions; all versions; all versions Fixed in TXpert Hub CoreTec 4 version 3.0.1 Patch available CNA

CPE configurations NVD · 2

CPE	Versions	Role	Vendor
cpe:2.3:o:abb:txpert_hub_coretec_4_firmware::::::::	before 3.0.1	Vulnerable	ABB
cpe:2.3:h:abb:txpert_hub_coretec_4:-:::::::*	not specified by NVD	Running on	ABB

cpe:2.3:o:abb:txpert_hub_coretec_4_firmware:*:*:*:*:*:*:*:* Versions before 3.0.1 Vulnerable ·ABB
cpe:2.3:h:abb:txpert_hub_coretec_4:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·ABB

Remediation

Fix · CNA TXpert Hub CoreTec 4 (Hitachi Energy) Fixed in TXpert Hub CoreTec 4 version 3.0.1

Timeline

2026-10-02 Threatist record created from CVE-2023-2625
2026-10-03 Alias added: GHSA-22m4-69fv-5rj6

References

Advisory 1

https://search.abb.com/library/Download.aspx?DocumentID=8DBD000163&LanguageCode=en&DocumentPartId=&Action=Launch

TI-2019-03985 ABB MicroSCADA Pro SYS600 Missing Authentication for Critical Function CVSS 3.1CRITICAL 9.8
TI-2018-10635 Improper authentication in ICS-CERT ABB eSOMS CVSS 3.0CRITICAL 9.8
TI-2024-01871 Heap-based buffer overflow in Hitachi Energy FOXMAN-UN CVSS 3.1CRITICAL 9.8
TI-2026-07105 Path traversal in Hitachi Energy RTU500 series CMU firmware CVSS 3.1CRITICAL 9.1
TI-2019-13270 Path traversal in Relion 670 Series CVSS 3.1CRITICAL 10.0
TI-2026-07104 Missing authentication in Hitachi Energy RTU500 series CMU firmware CVSS 3.1CRITICAL 9.1

See all 146 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences