Vulnerability · Published Aug 20, 2021 · Assigned by Hitachi Energy
CVE-2021-35529Password in Memory Vulnerability in Retail Operations Product and Counterparty Settlement and Billing (CSB)
High 7.7
In plain English
A high-severity security flaw in Counterparty Settlement and Billing (CSB) from Hitachi ABB Power Grids. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 1.3% (higher than 70% of all known vulnerabilities).
Official description
Insufficiently Protected Credentials vulnerability in client environment of Hitachi ABB Power Grids Retail Operations and Counterparty Settlement Billing (CSB) allows an attacker or unauthorized user to access database credentials, shut down the product and access or alter. This issue affects: Hitachi ABB Power Grids Retail Operations version 5.7.2 and prior versions. Hitachi ABB Power Grids Counterparty Settlement Billing (CSB) version 5.7.2 and prior versions.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Hitachi ABB Power Grids | Retail Operations | 5.7.2 – through 5.7.2 |
| Hitachi ABB Power Grids | Counterparty Settlement and Billing (CSB) | 5.7.2 – through 5.7.2 |
Weakness: CWE-522 · Vector: CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:N
References
- https://search.abb.com/library/Download.aspx?DocumentID=9AKK107992A5933&LanguageCode=en&DocumentPartId=&Action=Launch x_refsource_CONFIRM
- https://search.abb.com/library/Download.aspx?DocumentID=9AKK107992A5821&LanguageCode=en&DocumentPartId=&Action=Launch x_refsource_CONFIRM
- https://us-cert.cisa.gov/ics/advisories/icsa-21-236-02 x_refsource_CONFIRM