CVE-2021-35527

Password Autocomplete Vulnerability in Hitachi ABB Power Grids eSOMS Application

State: Published
Severity: 7.5 High
Published: Jul 14, 2021
Updated: Sep 16, 2024
Reserved: Jun 28, 2021

Description

Password autocomplete vulnerability in the web application password field of Hitachi ABB Power Grids eSOMS allows attacker to gain access to user credentials that are stored by the browser. This issue affects: Hitachi ABB Power Grids eSOMS version 6.3 and prior versions.

Scores

CVSS	Score	Vector	Source
3.1	7.5 High	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N	Hitachi Energy

Weaknesses

CWE-200 Information Exposure

Affected Products

Product	Versions
eSOMSHitachi ABB Power Grids	6.3 and earlierAffected

References

https://search.abb.com/library/Download.aspx?DocumentID=9AKK107992A0957&LanguageCode=en&DocumentPartId=&Action=Launch

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.