PT-2021-17161 · Hitachi Abb Power Grids · Esoms

Published 2021-06-14 · Updated 2023-05-16 · CVE-2021-26845

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:C/I:N/A:N

Name of the Vulnerable Software and Affected Versions: Hitachi ABB Power Grids eSOMS versions prior to 6.0.4.2.2 Hitachi ABB Power Grids eSOMS versions prior to 6.1.4 Hitachi ABB Power Grids eSOMS versions prior to 6.3

Description: The issue allows an unauthorized user to gain access to report data if the URL used to access the report is discovered.

Recommendations: For versions prior to 6.0.4.2.2, update to version 6.0.4.2.2 or later. For versions prior to 6.1.4, update to version 6.1.4 or later. For versions prior to 6.3, update to version 6.3 or later.

Fix

Incorrect Authorization

Weakness Enumeration

CWE-863

Related Identifiers

BDU:2025-12645

CVE-2021-26845

Affected Products

Esoms

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2021-26845 · Security Note
• https://search.abb.com/library/Download.aspx?DocumentID=9AKK107991A8942&LanguageCode=en&DocumentPartId=&Action=Launch · Vendor Advisory
• https://bdu.fstec.ru/vul/2025-12645 · Security Note
• https://osv.dev/vulnerability/CVE-2021-26845 · Vendor Advisory
• https://search.abb.com/library/Download.aspx?DocumentID=9AKK107991A8942&LanguageCode=en&DocumentPartId=&Action=Launch · Note
• https://t.me/cvenotify/16319 · Telegram Post