Description
An attacker could trick a user of Hitachi ABB Power Grids Ellipse Enterprise Asset Management (EAM) versions prior to and including 9.0.25 into visiting a malicious website posing as a login page for the Ellipse application and gather authentication credentials.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Hitachi ABB Power Grids | Ellipse Enterprise Asset Management (EAM) | unspecified – ≤ 9.0.25 | — |
Advisories 1
- ICSA-21-061-01 Hitachi ABB Power Grids Ellipse EAM CISA ICS & IT advisories · Mar 2, 2021