Skip to content
OpenAdvisories
Medium ICSA-21-061-01 2 CVEs

Hitachi ABB Power Grids Ellipse EAM

Published Mar 2, 2021 · Updated Mar 2, 2021

Vendor: Hitachi Energy Product: Ellipse EAM

Summary

Successful exploitation of these vulnerabilities could allow an attacker to steal sensitive information, hijack a user 's session, or compromise authentication credentials.

Vulnerabilities 2

  • Medium 5.5
    CVE-2021-27414

    User interface misrepresentation of critical information in Hitachi ABB Power Grids Ellipse EAM

    An attacker could trick a user of Hitachi ABB Power Grids Ellipse Enterprise Asset Management (EAM) versions prior to and including 9.0.25 into visiting a malicious website posing as a login page for the Ellipse application and gather authentication credentia…

    Hitachi ABB Power Grids Ellipse Enterprise Asset Management (EAM)
  • Medium 5.5
    CVE-2021-27416

    Cross-site scripting in Hitachi ABB Power Grids Ellipse EAM

    An attacker could exploit this vulnerability in Hitachi ABB Power Grids Ellipse Enterprise Asset Management (EAM) versions prior to and including 9.0.25 by tricking a user to click on a link containing malicious code that would then be run by the web browser.…

    Hitachi ABB Power Grids Ellipse Enterprise Asset Management (EAM)

Revision history

  1. #1

    ICSA-21-061-01 Hitachi ABB Power Grids Ellipse EAM

References