Description (CNA)
An attacker could exploit this vulnerability in Hitachi ABB Power Grids Ellipse Enterprise Asset Management (EAM) versions prior to and including 9.0.25 by tricking a user to click on a link containing malicious code that would then be run by the web browser. This can result in the compromise of confidential information, or even the takeover of the user’s session.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Hitachi ABB Power Grids / Ellipse Enterprise Asset Management (EAM) | affected unspecified through 9.0.25 |
CWE
CWE-79
References
- https://www.cisa.gov/uscert/ics/advisories/icsa-21-061-01
- https://search.abb.com/library/Download.aspx?DocumentID=9AKK107991A7777&LanguageCode=en&DocumentPartId=&Action=Launch
ADP enrichment
No English description supplied.
No English description supplied.
No references supplied.