What’s Vulnerable › Vulnerabilities

CVE-2021-35529: Password in Memory Vulnerability in Retail Operations Product and Counterparty Settlement and Billing (CSB)

• Severity: high (CVSS 7.2 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2021-08-20 · updated 2026-06-17
• Weakness: CWE-522

Description

Insufficiently Protected Credentials vulnerability in client environment of Hitachi ABB Power Grids Retail Operations and Counterparty Settlement Billing (CSB) allows an attacker or unauthorized user to access database credentials, shut down the product and access or alter. This issue affects: Hitachi ABB Power Grids Retail Operations version 5.7.2 and prior versions. Hitachi ABB Power Grids Counterparty Settlement Billing (CSB) version 5.7.2 and prior versions.

Affected products

• Hitachienergy Counterparty Settlement And Billing: before 5.7.3 — fixed in 5.7.3
• Hitachi Energy Retail Operations: before 5.7.3 — fixed in 5.7.3

How to fix

Upgrade to a fixed version: Hitachienergy Counterparty Settlement And Billing 5.7.3; Hitachi Energy Retail Operations 5.7.3. Check the vendor advisory for mitigations.

References

• https://search.abb.com/library/Download.aspx?DocumentID=9AKK107992A5821&LanguageCode=en&DocumentPartId=&Action=Launch
• https://search.abb.com/library/Download.aspx?DocumentID=9AKK107992A5933&LanguageCode=en&DocumentPartId=&Action=Launch
• https://us-cert.cisa.gov/ics/advisories/icsa-21-236-02
• https://search.abb.com/library/Download.aspx?DocumentID=9AKK107992A5821&LanguageCode=en&DocumentPartId=&Action=Launch
• https://search.abb.com/library/Download.aspx?DocumentID=9AKK107992A5933&LanguageCode=en&DocumentPartId=&Action=Launch
• https://us-cert.cisa.gov/ics/advisories/icsa-21-236-02

Get alerted when CVE-2021-35529 or the next vulnerability affects your stack