CVE-2021-35528: hitachi energy counterparty settlement and billing (csb) Improper Access Control
Vulnerability summary
CVE-2021-35528 is a high (CVSS 7.2) Improper Access Control vulnerability in hitachi energy counterparty settlement and billing (csb). EPSS estimates a 0.26% chance of exploitation in the next 30 days, higher than 16.5% of scored vulnerabilities.
Timeline
- 17-11-2021PublishedVulnerability first disclosed.
- 16-09-2024Last modifiedVulnerability information updated.
Description
Improper Access Control vulnerability in the application authentication and authorization of Hitachi Energy Retail Operations, Counterparty Settlement and Billing (CSB) allows an attacker to execute a modified signed Java Applet JAR file. A successful exploitation may lead to data extraction or modification of data inside the application. This issue affects: Hitachi Energy Retail Operations 5.7.3 and prior versions. Hitachi Energy Counterparty Settlement and Billing (CSB) 5.7.3 prior versions.
CVSS metrics
3 scores · 2 sources · 2 versions- NVDNIST7.1HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:NDiffers
EPSS trend
Probability
0.26%
Chance of exploitation in the next 30 days
Percentile
17%
Versus all other CVEs
30-day change
0.00 pp
From 0.26% on 20-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Hitachi energy2 products
- counterparty settlement and billing (csb)≥ 5.7.3, < 5.7.3.1
- retail operations≥ 5.7.3, < 5.7.3.1
Hitachienergy2 products
- counterparty_settlements_and_billing≤ 5.7.3
- retail_operations≤ 5.7.3
2 vendors · 4 products