CVE-2021-35529

Password in Memory Vulnerability in Retail Operations Product and Counterparty Settlement and Billing (CSB)

7.7 High

Insufficiently Protected Credentials vulnerability in client environment of Hitachi ABB Power Grids Retail Operations and Counterparty Settlement Billing (CSB) allows an attacker or unauthorized user to access database credentials, shut down the product and access or alter. This issue affects: Hitachi ABB Power Grids Retail Operations version 5.7.2 and prior versions. Hitachi ABB Power Grids Counterparty Settlement Billing (CSB) version 5.7.2 and prior versions.

Attack profile

How easy it is to exploit

Attack vector: Network
Complexity: High
Privileges needed: High
User interaction: None

What an attacker can affect

Confidentiality: High
Integrity: High
Availability: None

Exploit likelihood

1.26%Up 0.6 points since Aug 21, 2021

What each source reports

CVE List Score used 7.7

Password in Memory Vulnerability in Retail Operations Product and Counterparty Settlement and Billing (CSB)

Record: CVE-2021-35529
CVSS 3.1: 7.7 HighCVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:N
Weakness: CWE-522
Updated: 2026-11-02

EUVDEUVD-2021-22165 7.7

Record: EUVD-2021-22165
CVSS 3.1: 7.7 HighCVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:N
Updated: 2026-11-03

GitHub AdvisoriesGHSA-6c6g-x473-fqjx 7.2

Insufficiently Protected Credentials vulnerability in client environment of Hitachi ABB Power...

Record: GHSA-6c6g-x473-fqjx
CVSS 3.1: 7.2 HighCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Weakness: CWE-522
Updated: 2026-11-02

NVD 7.7

Record: CVE-2021-35529
CVSS 3.1: 7.7 HighCVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:N
CVSS 3.1: 7.2 HighCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0: 6.5 MediumAV:N/AC:L/Au:S/C:P/I:P/A:P
Weakness: CWE-522
Updated: 2026-11-02

Affected products

History

History
Recorded	Changed	Sources
Nov 3, 2026	aliases, published	EUVD
Nov 2, 2026	first indexed	CVE List, GitHub Advisories, NVD

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2021-35529 is a high vulnerability (CVSS 7.7) in Hitachi Abb Power Grids Counterparty Settlement And Billing (csb), published August 20, 2021. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.26%, the 69th percentile. No source names a fixed version.