Vulnerability Description
An attacker could trick a user of Hitachi ABB Power Grids Ellipse Enterprise Asset Management (EAM) versions prior to and including 9.0.25 into visiting a malicious website posing as a login page for the Ellipse application and gather authentication credentials.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Hitachienergy | Ellipse Enterprise Asset Management | < 9.0.23 |
Related Weaknesses (CWE)
References
- https://search.abb.com/library/Download.aspx?DocumentID=9AKK107991A7777&LanguageVendor Advisory
- https://www.cisa.gov/uscert/ics/advisories/icsa-21-061-01MitigationThird Party AdvisoryUS Government Resource
- https://search.abb.com/library/Download.aspx?DocumentID=9AKK107991A7777&LanguageVendor Advisory
- https://www.cisa.gov/uscert/ics/advisories/icsa-21-061-01MitigationThird Party AdvisoryUS Government Resource
FAQ
What is CVE-2021-27414?
CVE-2021-27414 is a vulnerability with a CVSS score of 5.5 (MEDIUM). An attacker could trick a user of Hitachi ABB Power Grids Ellipse Enterprise Asset Management (EAM) versions prior to and including 9.0.25 into visiting a malicious website posing as a login page for ...
How severe is CVE-2021-27414?
CVE-2021-27414 has been rated MEDIUM with a CVSS base score of 5.5/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2021-27414?
Check the references section above for vendor advisories and patch information. Affected products include: Hitachienergy Ellipse Enterprise Asset Management.