Hitachi ABB Power Grids

Products

ProductCVEsExploitedLatest
Ellipse Enterprise Asset Management (EAM)2–Mar 11, 2022
Counterparty Settlement and Billing (CSB)1–Aug 20, 2021
eSOMS1–Jul 14, 2021
Retail Operations1–Aug 20, 2021
System Data Manager – SDM6001–Sep 8, 2021

Exploited and recent CVEs

  • CVE-2021-27414 Medium 5.5 User interface misrepresentation of critical information in Hitachi ABB Power Grids Ellipse EAM 0.6%
  • CVE-2021-27416 Medium 5.5 Cross-site scripting in Hitachi ABB Power Grids Ellipse EAM 0.6%
  • CVE-2021-35526 Medium 6.3 Storage of Sensitive Information Vulnerability in Hitachi ABB Power Grids System Data Manager – SDM600 Product 0.1%
  • CVE-2021-35529 High 7.7 Password in Memory Vulnerability in Retail Operations Product and Counterparty Settlement and Billing (CSB) 1.3%
  • CVE-2021-35529 High 7.7 Password in Memory Vulnerability in Retail Operations Product and Counterparty Settlement and Billing (CSB) 1.3%
  • CVE-2021-35527 High 7.5 Password Autocomplete Vulnerability in Hitachi ABB Power Grids eSOMS Application 1.0%