Vulnerabilities > Hitachiabb Powergrids

DATE CVE VULNERABILITY TITLE RISK
2021-09-08 CVE-2021-35526 Incorrect Authorization vulnerability in Hitachiabb-Powergrids Sdm600 Firmware
Backup file without encryption vulnerability is found in Hitachi ABB Power Grids System Data Manager – SDM600 allows attacker to gain access to sensitive information.
local
low complexity
hitachiabb-powergrids CWE-863
7.8
2021-06-14 CVE-2021-27887 Cross-site Scripting vulnerability in Hitachiabb-Powergrids Ellipse Asset Performance Management
Cross-site Scripting (XSS) vulnerability in the main dashboard of Ellipse APM versions allows an authenticated user or integrated application to inject malicious data into the application that can then be executed in a victim’s browser.
network
low complexity
hitachiabb-powergrids CWE-79
5.4