CVE-2021-35529

Insufficiently Protected Credentials vulnerability in client environment of Hitachi ABB Power Grids Retail Operations and Counterparty Settlement Billing (CSB) allows an attacker or unauthorized user to access database credentials, shut down the product and access or alter. This issue affects: Hitachi ABB Power Grids Retail Operations version 5.7.2 and prior versions. Hitachi ABB Power Grids Counterparty Settlement Billing (CSB) version 5.7.2 and prior versions.

• CWE-522
• CWE-522

• https://search.abb.com/library/Download.aspx?DocumentID=9AKK107992A5821&LanguageCode=en&DocumentPartId=&Action=LaunchVendor Advisory
• https://search.abb.com/library/Download.aspx?DocumentID=9AKK107992A5933&LanguageCode=en&DocumentPartId=&Action=LaunchVendor Advisory
• https://us-cert.cisa.gov/ics/advisories/icsa-21-236-02Third Party Advisory, US Government Resource
• https://search.abb.com/library/Download.aspx?DocumentID=9AKK107992A5821&LanguageCode=en&DocumentPartId=&Action=LaunchVendor Advisory
• https://search.abb.com/library/Download.aspx?DocumentID=9AKK107992A5933&LanguageCode=en&DocumentPartId=&Action=LaunchVendor Advisory
• https://us-cert.cisa.gov/ics/advisories/icsa-21-236-02Third Party Advisory, US Government Resource

Published

Aug 20, 2021

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-35522A Buffer Overflow in Thrift command handlers in IDEMIA Morph…9.8
• CVE-2021-35523Securepoint SSL VPN Client v2 before 2.0.32 on Windows has u…7.8
• CVE-2021-35525PostSRSd before 1.11 allows a denial of service (subprocess …5.3
• CVE-2021-35526Backup file without encryption vulnerability is found in Hit…7.8
• CVE-2021-35527Password autocomplete vulnerability in the web application p…7.5
• CVE-2021-35528Improper Access Control vulnerability in the application aut…7.1
• CVE-2021-3553A Server-Side Request Forgery (SSRF) vulnerability in the EP…7.5
• CVE-2021-35530A vulnerability in the application authentication and author…6.7
• CVE-2021-35531Improper Input Validation vulnerability in a particular conf…6.7
• CVE-2021-35532A vulnerability exists in the file upload validation part of…6.7
• CVE-2021-35533Improper Input Validation vulnerability in the APDU parser i…7.5
• CVE-2021-35534Insufficient security control vulnerability in internal data…7.2