CVE-2021-27414: Hitachienergy Ellipse Enterprise Asset Management

Medium severity, CVSS 6.1. EPSS: 0.6% chance of exploitation in the next 30 days.

An attacker could trick a user of Hitachi ABB Power Grids Ellipse Enterprise Asset Management (EAM) versions prior to and including 9.0.25 into visiting a malicious website posing as a login page for the Ellipse application and gather authentication credentials.

Affected products

• Hitachienergy Ellipse Enterprise Asset Management: before 9.0.23 (fixed in 9.0.23)

Published 2022-03-11. Last modified 2026-06-17.