CVE-2021-27414

Katalog CVE

CVSS 6.1 · Medium EPSS 0,57%

Kerentanan User Interface (UI) Misrepresentation of Critical Information pada hitachienergy ellipse enterprise asset management. Skor CVSS 3.1 6.1 (Medium) menurut NVD.

Deskripsi (NVD)

An attacker could trick a user of Hitachi ABB Power Grids Ellipse Enterprise Asset Management (EAM) versions prior to and including 9.0.25 into visiting a malicious website posing as a login page for the Ellipse application and gather authentication credentials.

Rincian

Terbit di NVD

11 Maret 2022

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

6.1 (Medium), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-451: User Interface (UI) Misrepresentation of Critical Information
CWE-1021: Improper Restriction of Rendered UI Layers or Frames

EPSS (30 hari)

0,57% peluang dieksploitasi; lebih tinggi dari 45,8% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://search.abb.com/library/Download.aspx?DocumentID=9AKK107991A7777&LanguageCode=en&DocumentPartId=&Action... advisory vendor
• https://www.cisa.gov/uscert/ics/advisories/icsa-21-061-01 mitigasi · advisory pihak ketiga · pemerintah AS