IcscertCVELIST:CVE-2021-27414CVE-2021-27414 User interface misrepresentation of critical information in Hitachi ABB Power Grids Ellipse EAM
5.5 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L
6.5 Medium
AI Score
Confidence
High
0.002 Low
EPSS
Percentile
52.4%
An attacker could trick a user of Hitachi ABB Power Grids Ellipse Enterprise Asset Management (EAM) versions prior to and including 9.0.25 into visiting a malicious website posing as a login page for the Ellipse application and gather authentication credentials.
CNA Affected
[
{
"product": "Ellipse Enterprise Asset Management (EAM)",
"vendor": "Hitachi ABB Power Grids",
"versions": [
{
"lessThanOrEqual": "9.0.25",
"status": "affected",
"version": "unspecified",
"versionType": "custom"
}
]
}
]Related
5.5 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L
6.5 Medium
AI Score
Confidence
High
0.002 Low
EPSS
Percentile
52.4%