CVE-2021-26845: eSOMS Report Function Vulnerability

Severity: high (CVSS 7.5 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.9% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2021-06-14 · updated 2026-06-17
Weakness: CWE-863

Description

Information Exposure vulnerability in Hitachi ABB Power Grids eSOMS allows unauthorized user to gain access to report data if the URL used to access the report is discovered. This issue affects: Hitachi ABB Power Grids eSOMS 6.0 versions prior to 6.0.4.2.2; 6.1 versions prior to 6.1.4; 6.3 versions prior to 6.3.

Affected products

ABB eSOMS: from 6.0 before 6.0.4.2.2; from 6.1 before 6.1.4 — fixed in 6.0.4.2.2, 6.1.4

How to fix

Upgrade to a fixed version: ABB eSOMS 6.0.4.2.2, 6.1.4. Check the vendor advisory for mitigations.

References

https://search.abb.com/library/Download.aspx?DocumentID=9AKK107991A8942&LanguageCode=en&DocumentPartId=&Action=Launch
https://search.abb.com/library/Download.aspx?DocumentID=9AKK107991A8942&LanguageCode=en&DocumentPartId=&Action=Launch

Get alerted when CVE-2021-26845 or the next vulnerability affects your stack