CVE-2021-26845
published 2021-06-14CVE-2021-26845: Information Exposure vulnerability in Hitachi ABB Power Grids eSOMS allows unauthorized user to gain access to report data if the URL used to access the report…
PriorityP343high7.5CVSS 3.1
AVNACLPRNUINSUCHINAN
EPSS
0.93%
56.8th percentile
Information Exposure vulnerability in Hitachi ABB Power Grids eSOMS allows unauthorized user to gain access to report data if the URL used to access the report is discovered. This issue affects: Hitachi ABB Power Grids eSOMS 6.0 versions prior to 6.0.4.2.2; 6.1 versions prior to 6.1.4; 6.3 versions prior to 6.3.
Affected
2 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| hitachienergy | esoms | >= 6.0 < 6.0.4.2.2 | 6.0.4.2.2 |
| hitachienergy | esoms | >= 6.1 < 6.1.4 | 6.1.4 |
CVSS provenance
nvdv3.17.5HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
nvdv2.05.0MEDIUMAV:N/AC:L/Au:N/C:P/I:N/A:N
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
CISA ICS
Hitachi ABB Power Grids eSOMS
cisa_ics·2021-03-18·CVSS 7.5
[HIGH] Hitachi ABB Power Grids eSOMS
## Archived Content In an effort to keep CISA.gov current, the archive contains outdated information that may not reflect current policy or programs.
ICS Advisory
##
Hitachi ABB Power Grids eSOMS
Last RevisedMarch 18, 2021
Alert CodeICSA-21-077-02
## 1. EXECUTIVE SUMMARY
- CVSS v3 7.5
- ATTENTION: Low skill level to exploit
- Vendor: Hitachi ABB Power Grids
- Equipment: eSOMS
- Vulnerability: Exposure of Sensitive Information to an Unauthorized Actor
## 2. RISK EVALUATION
Successful exploitation of this vulnerability could allow an attacker to gain access to unauthorized information.
## 3. TECHNICAL DETAILS
## 3.1 AFFECTED PRODUCTS
Hitachi ABB Power Grids reports this vulnerability affects the following eSOMS products:
- eSOMS Vers
GHSA
GHSA-r64q-3fpg-c3hr: Information Exposure vulnerability in Hitachi ABB Power Grids eSOMS allows unauthorized user to gain access to report data if the URL used to access t
ghsa_unreviewed·2022-05-24
CVE-2021-26845 [HIGH] CWE-863 GHSA-r64q-3fpg-c3hr: Information Exposure vulnerability in Hitachi ABB Power Grids eSOMS allows unauthorized user to gain access to report data if the URL used to access t
Information Exposure vulnerability in Hitachi ABB Power Grids eSOMS allows unauthorized user to gain access to report data if the URL used to access the report is discovered. This issue affects: Hitachi ABB Power Grids eSOMS 6.0 versions prior to 6.0.4.2.2; 6.1 versions prior to 6.1.4; 6.3 versions prior to 6.3.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2021-06-14
Published