CVE-2021-35527

HIGH

Hitachi ABB Power Grids eSOMS <6.3 - Info Disclosure

Title source: llm

Description

Password autocomplete vulnerability in the web application password field of Hitachi ABB Power Grids eSOMS allows attacker to gain access to user credentials that are stored by the browser. This issue affects: Hitachi ABB Power Grids eSOMS version 6.3 and prior versions.

References (1)

[Vendor Advisory] https://search.abb.com/library/Download.aspx?DocumentID=9AKK107992A0957&LanguageCode=en&DocumentPartId=&Action=Launch

Scores

CVSS v3 7.5

EPSS 0.0028

EPSS Percentile 50.7%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Classification

CWE

CWE-522 CWE-200

Status published

Affected Products (1)

hitachienergy/esoms < 6.3.1

Timeline

Published Jul 14, 2021

Tracked Since Feb 18, 2026