Riskcovery

CVE-2021-35529

Password in Memory Vulnerability in Retail Operations Product and Counterparty Settlement and Billing (CSB)

State
Published
Severity
7.7 High
Published
Aug 20, 2021
Updated
Sep 17, 2024
Reserved
Jun 28, 2021

Read the record on cve.org

Description

Insufficiently Protected Credentials vulnerability in client environment of Hitachi ABB Power Grids Retail Operations and Counterparty Settlement Billing (CSB) allows an attacker or unauthorized user to access database credentials, shut down the product and access or alter. This issue affects: Hitachi ABB Power Grids Retail Operations version 5.7.2 and prior versions. Hitachi ABB Power Grids Counterparty Settlement Billing (CSB) version 5.7.2 and prior versions.

Scores

CVSSScoreVectorSource
3.17.7 HighCVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:NHitachi Energy

Weaknesses

  • CWE-522 Insufficiently Protected Credentials

Affected Products

ProductVersions
Retail OperationsHitachi ABB Power Grids
  • 5.7.2 through 5.7.2Affected
Counterparty Settlement and Billing (CSB)Hitachi ABB Power Grids
  • 5.7.2 through 5.7.2Affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.