VulnerabilityModified

CVE-2021-35529

HIGH 7.2EPSS 1.26%

Does this matter?

High impact if exploited, but EPSS currently rates exploitation as unlikely (1.26%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.

Description

Insufficiently Protected Credentials vulnerability in client environment of Hitachi ABB Power Grids Retail Operations and Counterparty Settlement Billing (CSB) allows an attacker or unauthorized user to access database credentials, shut down the product and access or alter. This issue affects: Hitachi ABB Power Grids Retail Operations version 5.7.2 and prior versions. Hitachi ABB Power Grids Counterparty Settlement Billing (CSB) version 5.7.2 and prior versions.

CVSS 3.1: 7.2 HIGHCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
EPSS: 1.26% probability · 68th percentile
CISA KEV: Not listed
Weakness: CWE-522
Affected: hitachienergy/counterparty settlement and billing · hitachienergy/retail operations
Source: cybersecurity@hitachienergy.com

References

https://search.abb.com/library/Download.aspx?DocumentID=9AKK107992A5821&LanguageCode=en&DocumentPartId=&Action=LaunchVendor Advisory
https://search.abb.com/library/Download.aspx?DocumentID=9AKK107992A5933&LanguageCode=en&DocumentPartId=&Action=LaunchVendor Advisory
https://us-cert.cisa.gov/ics/advisories/icsa-21-236-02Third Party Advisory, US Government Resource
https://search.abb.com/library/Download.aspx?DocumentID=9AKK107992A5821&LanguageCode=en&DocumentPartId=&Action=LaunchVendor Advisory
https://search.abb.com/library/Download.aspx?DocumentID=9AKK107992A5933&LanguageCode=en&DocumentPartId=&Action=LaunchVendor Advisory
https://us-cert.cisa.gov/ics/advisories/icsa-21-236-02Third Party Advisory, US Government Resource

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.