Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2021-35529

Опубликовано: 20 авг. 2021
Источник: nvd
CVSS3: 7.7
CVSS3: 7.2
CVSS2: 6.5
EPSS Низкий

Описание

Insufficiently Protected Credentials vulnerability in client environment of Hitachi ABB Power Grids Retail Operations and Counterparty Settlement Billing (CSB) allows an attacker or unauthorized user to access database credentials, shut down the product and access or alter. This issue affects: Hitachi ABB Power Grids Retail Operations version 5.7.2 and prior versions. Hitachi ABB Power Grids Counterparty Settlement Billing (CSB) version 5.7.2 and prior versions.

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:hitachienergy:counterparty_settlement_and_billing:*:*:*:*:*:*:*:*
Версия до 5.7.3 (исключая)
cpe:2.3:a:hitachienergy:retail_operations:*:*:*:*:*:*:*:*
Версия до 5.7.3 (исключая)

EPSS

Процентиль: 52%
0.00295
Низкий

7.7 High

CVSS3

7.2 High

CVSS3

6.5 Medium

CVSS2

Дефекты

CWE-522
CWE-522

Связанные уязвимости

CVSS3: 7.2
github
больше 3 лет назад

Insufficiently Protected Credentials vulnerability in client environment of Hitachi ABB Power Grids Retail Operations and Counterparty Settlement Billing (CSB) allows an attacker or unauthorized user to access database credentials, shut down the product and access or alter. This issue affects: Hitachi ABB Power Grids Retail Operations version 5.7.2 and prior versions. Hitachi ABB Power Grids Counterparty Settlement Billing (CSB) version 5.7.2 and prior versions.

EPSS

Процентиль: 52%
0.00295
Низкий

7.7 High

CVSS3

7.2 High

CVSS3

6.5 Medium

CVSS2

Дефекты

CWE-522
CWE-522