Hitachi ABB Power Grids Ellipse EAM

An attacker with valid credentials could hijack a logged-in operator's session or steal authentication credentials, potentially gaining unauthorized access to the EAM system and its connected infrastructure.

Power utilities and energy companies managing Ellipse EAM asset/maintenance software on versions 9.0.25 and earlier. This affects anyone using the system to plan maintenance, track equipment, or manage work orders for generation, transmission, or distribution assets.

An attacker with valid credentials logs into Ellipse EAM and crafts a malicious input or link that exploits the stored or reflected XSS vulnerability. When another user (ideally an engineer or administrator) clicks the link or views the page, the attacker's script runs in their session, capturing their authentication token or session cookie for hijacking.