

Rewterz Threat Advisory – Microsoft MSHTML Remote Code Execution Vulnerability
September 7, 2021
Rewterz Threat Advisory – CVE-2021-3766 – Node.js Security Vulnerability
September 8, 2021
Rewterz Threat Advisory – Microsoft MSHTML Remote Code Execution Vulnerability
September 7, 2021
Rewterz Threat Advisory – CVE-2021-3766 – Node.js Security Vulnerability
September 8, 2021Severity
High
Analysis Summary
CVE-2021-35526
The application does not encrypt backup files. A local operating system user can modify backup files, which may allow an attacker to overwrite system configuration files and gain privileges.
Impact
- Exposure of Sensitive Data
Affected Vendors
- Hitachi ABB Power Grids
Affected Products
- SDM600: All versions prior to 1.2 FP2 HF6
Remediation
Refer to Cert-Cisa Advisory for the patch, upgrade, or suggested workaround information.