CVE-2021-35528

Authentication Bypass Vulnerability Vulnerability in Retail Operations Product and Counterparty Settlement and Billing (CSB)

State: Published
Severity: 7.2 High
Published: Nov 17, 2021
Updated: Sep 16, 2024
Reserved: Jun 28, 2021

Read the record on cve.org

Description

Improper Access Control vulnerability in the application authentication and authorization of Hitachi Energy Retail Operations, Counterparty Settlement and Billing (CSB) allows an attacker to execute a modified signed Java Applet JAR file. A successful exploitation may lead to data extraction or modification of data inside the application. This issue affects: Hitachi Energy Retail Operations 5.7.3 and prior versions. Hitachi Energy Counterparty Settlement and Billing (CSB) 5.7.3 prior versions.

Scores

CVSS	Score	Vector	Source
3.1	7.2 High	CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:N	Hitachi Energy

Weaknesses

CWE-284 Improper Access Control

Affected Products

Product	Versions
Retail OperationsHitachi Energy	5.7.3 to before 5.7.3.1Affected
Counterparty Settlement and Billing (CSB)Hitachi Energy	5.7.3 to before 5.7.3.1Affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.