CVE-2021-27414

MEDIO 6.1CVE-2021-27414 · Published 11/03/2022 · updated 17/06/2026

In breve

CVE-2021-27414 è una vulnerabilità MEDIO (CVSS 6.1) che riguarda ellipse enterprise asset management (hitachienergy).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 0.57%, superiore al 47.3% delle vulnerabilità.
Correzione: aggiornare a 9.0.23 o successiva.

Package	Affected versions	Patched versions
ellipse enterprise asset management hitachienergy	`< 9.0.23`	`9.0.23`

Description

An attacker could trick a user of Hitachi ABB Power Grids Ellipse Enterprise Asset Management (EAM) versions prior to and including 9.0.25 into visiting a malicious website posing as a login page for the Ellipse application and gather authentication credentials.

References

search.abb.com/library/Download.aspx · Vendor Advisory
cisa.gov/uscert/ics/advisories/icsa-21-061-01 · Mitigation

Altre vulnerabilità di ellipse enterprise asset management

Vedi tutto →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free