Description

An attacker could exploit this vulnerability in Hitachi ABB Power Grids Ellipse Enterprise Asset Management (EAM) versions prior to and including 9.0.25 by tricking a user to click on a link containing malicious code that would then be run by the web browser. This can result in the compromise of confidential information, or even the takeover of the user’s session.

Related CPE's

a

hitachienergy

ellipse_enterprise_asset_management

Vulnerable

References

https://search.abb.com/library/Download.aspx?DocumentID=9AKK107991A7777&LanguageCode=en&DocumentPartId=&Action=Launch

Vendor Advisory

https://www.cisa.gov/uscert/ics/advisories/icsa-21-061-01

Third Party AdvisoryUS Government Resource

https://search.abb.com/library/Download.aspx?DocumentID=9AKK107991A7777&LanguageCode=en&DocumentPartId=&Action=Launch

Vendor Advisory

https://www.cisa.gov/uscert/ics/advisories/icsa-21-061-01

Third Party AdvisoryUS Government Resource

Weaknesses

[email protected]

Secondary
CWE-79

[email protected]

Primary
CWE-79

CVSS impact metrics

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L

5.5 · Medium

Information

Source identifier

[email protected]

Vulnerability status

Modified

Published

2022-03-11T17:15:12.993Z

4 years ago

Last modified

2024-11-21T04:57:56.697Z

1 year ago