CVE-2021-35529 Password in Memory Vulnerability in Retail Operations Product and Counterparty Settlement and Billing (CSB)
Attackers can access database credentials to shut down the product and alter data in Hitachi Power Grids Retail Operations and CSB.
- Exploited in the wild
- Not known
- Login needed
- An administrator
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2021-35529?
CVE-2021-35529 is a high-severity vulnerability in Hitachi ABB Power Grids Counterparty Settlement and Billing (CSB), published on 20 Aug 2021. An attacker needs administrator access to exploit it, with no action from the victim.
Official description
Insufficiently Protected Credentials vulnerability in client environment of Hitachi ABB Power Grids Retail Operations and Counterparty Settlement Billing (CSB) allows an attacker or unauthorized user to access database credentials, shut down the product and access or alter. This issue affects: Hitachi ABB Power Grids Retail Operations version 5.7.2 and prior versions. Hitachi ABB Power Grids Counterparty Settlement Billing (CSB) version 5.7.2 and prior versions.
Weakness: CWE-522
Which versions are affected by CVE-2021-35529?
It affects 2 products.
Products include Hitachienergy Counterparty Settlement and Billing, Hitachienergy Retail Operations.
How do I fix CVE-2021-35529?
No fix has been published for CVE-2021-35529 yet. Limit exposure of the affected software until one is available.
Is CVE-2021-35529 being exploited?
There is no known exploitation of CVE-2021-35529 in the wild and no public exploit code.
Sources
Also known as GHSA-6c6g-x473-fqjx.