Hitachi ABB Power Grids vulnerabilities

5 vulnerabilities

Known vulnerabilities in Hitachi ABB Power Grids products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 5 products.

Products

5
5.8CVE-2021-27416hitachi abb power gridsellipse enterprise asset management (eam)+1
EPSS score
0.62%
An attacker could exploit this vulnerability in Hitachi ABB Power Grids Ellipse Enterprise Asset Management (EAM) versions prior to and including 9.0.25 by tricking a user to click on a link containing malicious code that would then be run by the web browser. This can result in the compromise of confidential information, or even the takeover of the user’s session.
6.1CVE-2021-27414hitachi abb power gridsellipse enterprise asset management (eam)+1
EPSS score
0.57%
An attacker could trick a user of Hitachi ABB Power Grids Ellipse Enterprise Asset Management (EAM) versions prior to and including 9.0.25 into visiting a malicious website posing as a login page for the Ellipse application and gather authentication credentials.
7.7CVE-2021-35529hitachi abb power gridscounterparty settlement and billing (csb)+3
EPSS score
1.26%
Insufficiently Protected Credentials vulnerability in client environment of Hitachi ABB Power Grids Retail Operations and Counterparty Settlement Billing (CSB) allows an attacker or unauthorized user to access database credentials, shut down the product and access or alter. This issue affects: Hitachi ABB Power Grids Retail Operations version 5.7.2 and prior versions. Hitachi ABB Power Grids Counterparty Settlement Billing (CSB) version 5.7.2 and prior versions.
7.5CVE-2021-35527hitachi abb power gridsesoms+1
EPSS score
1.02%
Password autocomplete vulnerability in the web application password field of Hitachi ABB Power Grids eSOMS allows attacker to gain access to user credentials that are stored by the browser. This issue affects: Hitachi ABB Power Grids eSOMS version 6.3 and prior versions.
7.8CVE-2021-35526hitachi abb power gridssystem data manager – sdm600+1
EPSS score
0.13%
Backup file without encryption vulnerability is found in Hitachi ABB Power Grids System Data Manager – SDM600 allows attacker to gain access to sensitive information. This issue affects: Hitachi ABB Power Grids System Data Manager – SDM600 1.2 versions prior to FP2 HF6 (Build Nr. 1.2.14002.257).