CVE-2021-27414: User interface misrepresentation of critical information in Hitachi ABB Power Grids Ellipse EAM
Vulnerability summary
CVE-2021-27414 is a medium (CVSS 6.1) vulnerability in hitachi abb power grids ellipse enterprise asset management (eam). EPSS estimates a 0.57% chance of exploitation in the next 30 days, higher than 46.6% of scored vulnerabilities.
Timeline
- 11-03-2022PublishedVulnerability first disclosed.
- 16-04-2025Last modifiedVulnerability information updated.
Description
An attacker could trick a user of Hitachi ABB Power Grids Ellipse Enterprise Asset Management (EAM) versions prior to and including 9.0.25 into visiting a malicious website posing as a login page for the Ellipse application and gather authentication credentials.
CVSS metrics
3 scores · 2 sources · 2 versions- CVE.orgCNA5.5MediumCVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:LDiffers
EPSS trend
Probability
0.57%
Chance of exploitation in the next 30 days
Percentile
47%
Versus all other CVEs
30-day change
No change 0.00 pp
From 0.57% on 22-09-2026
Known exploited
Compare KEV catalogs
CISA KEVNot in the CISA KEV catalog.
ENISA CNWNot in the ENISA CNW catalog.
CIRCLNot in the CIRCL catalog.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root cause- CWE-451User Interface (UI) Misrepresentation of Critical InformationThe user interface (UI) does not properly represent critical information to the user, allowing the information - or its source - to be obscured or spoofed. This is often a component in phishing attacks.
- CWE-1021Improper Restriction of Rendered UI Layers or FramesThe web application does not restrict or incorrectly restricts frame objects or UI layers that belong to another application or domain.
Affected systems
Hitachi abb power grids1 product
- ellipse enterprise asset management (eam)≥ unspecified, ≤ 9.0.25
Hitachienergy1 product
2 vendors · 2 products
References
2 links- www.cisa.gov/uscert/ics/advisories/icsa-21-061-01X Refsource CONFIRMMitigationThird Party AdvisoryUS Government Resource