CVE-2021-35527 HIGH

CVE-2021-35527: Password Autocomplete Vulnerability in Hitachi ABB Power Grids eSOMS Application

Vendor Hitachi Abb Power Grids
Product eSOMS
Weakness CWE-200 · Info exposure
Published July 14, 2021
Last update September 16, 2024
View on NVD All CVEs

CVSS base score

7.5/10
Attack vector Network
Attack complexity Low
Privileges required None
User interaction None
Confidentiality High
Integrity None

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

What the vulnerability does

01Description

Password autocomplete vulnerability in the web application password field of Hitachi ABB Power Grids eSOMS allows attacker to gain access to user credentials that are stored by the browser. This issue affects: Hitachi ABB Power Grids eSOMS version 6.3 and prior versions.

Key dates

02Disclosure timeline

July 14, 2021 CVE published
September 16, 2024 Record updated

Related vulnerabilities

04Related CVE

CVE-2024-41109 Pimcore vulnerable to disclosure of system and database information behind /admin firewall CVE-2024-3706 Exposure of Sensitive Information to an Unauthorized Actor vulnerability in OpenGnsys CVE-2021-32638 CodeQL runner: Command-line options that make GitHub access tokens visible to other processes are now deprecated CVE-2025-49184 Information disclosure to unauthorized user CVE-2025-30654 Junos OS and Junos OS Evolved: A local, low privileged user can access sensitive information