{
  "schemaVersion": 1,
  "attribution": [
    {
      "source": "CISA Known Exploited Vulnerabilities",
      "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog",
      "licence": "US government work"
    },
    {
      "source": "GitHub Advisory Database",
      "url": "https://github.com/advisories",
      "licence": "CC BY 4.0"
    },
    {
      "source": "Have I Been Pwned",
      "url": "https://haveibeenpwned.com/",
      "licence": "CC BY 4.0"
    },
    {
      "source": "CVE Program (CVE records)",
      "url": "https://www.cve.org/Legal/TermsOfUse",
      "licence": "CVE Terms of Use",
      "notice": "Copyright © 1999-2026, The MITRE Corporation. CVE is a trademark and the CVE logo is a registered trademark of The MITRE Corporation.",
      "terms": "CVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE™). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy."
    },
    {
      "source": "FIRST EPSS",
      "url": "https://www.first.org/epss/",
      "licence": "free to use; FIRST requests attribution"
    }
  ],
  "record": {
    "id": "CVE-2021-35534",
    "sourceURL": "https://www.cve.org/CVERecord?id=CVE-2021-35534",
    "idYear": 2021,
    "status": "PUBLISHED",
    "publishedAt": "2021-11-18T16:35:03.214Z",
    "updatedAt": "2024-09-16T18:45:19.607Z",
    "importedAt": "2026-10-24T01:56:32.228Z",
    "snapshot": {
      "id": "cve_2026-10-24_midnight_baseline",
      "at": "2026-10-24T00:00:00.000Z",
      "source": "https://github.com/CVEProject/cvelistV5/releases/tag/cve_2026-10-24_0100Z"
    },
    "facts": {
      "title": "Insufficient Security Control Vulnerability",
      "summary": "Insufficient security control vulnerability in internal database access mechanism of Hitachi Energy Relion 670/650/SAM600-IO, Relion 650, GMS600, PWC600 allows attacker who successfully exploited this vulnerability, of which the product does not sufficiently restrict access to an internal database tables, could allow anybody with user credentials to bypass security controls that is enforced by the product. Consequently, exploitation may lead to unauthorized modifications on data/firmware, and/or to permanently disabling the product. This issue affects: Hitachi Energy Relion 670 Series 2.0 all revisions; 2.2.2 all revisions; 2.2.3 versions prior to 2.2.3.5. Hitachi Energy Relion 670/650 Series 2.1 all revisions. 2.2.0 all revisions; 2.2.4 all revisions; Hitachi Energy Relion 670/650/SAM600-IO 2.2.1 all revisions; 2.2.5 versions prior to 2.2.5.2. Hitachi Energy Relion 650 1.0 all revisions. 1.1 all revisions; 1.2 all revisions; 1.3 versions prior to 1.3.0.8; Hitachi Energy GMS600 1.3.0; 1.3.0.1; 1.2.0. Hitachi Energy PWC600 1.0.1 version 1.0.1.4 and prior versions; 1.1.0 version 1.1.0.1 and prior versions.",
      "affected": [
        {
          "vendor": "Hitachi Energy",
          "product": "Relion 670 Series",
          "versions": [
            {
              "version": "2.0 all revisions",
              "status": "affected"
            },
            {
              "version": "2.2.2 all revisions",
              "status": "affected"
            },
            {
              "version": "2.2.3",
              "status": "affected",
              "versionType": "custom",
              "lessThan": "2.2.3.5"
            }
          ]
        },
        {
          "vendor": "Hitachi Energy",
          "product": "Relion 670/650 Series",
          "versions": [
            {
              "version": "2.2.0 all revisions",
              "status": "affected"
            },
            {
              "version": "2.2.4 all revisions",
              "status": "affected"
            },
            {
              "version": "2.1 all revisions",
              "status": "affected"
            }
          ]
        },
        {
          "vendor": "Hitachi Energy",
          "product": "Relion 670/650/SAM600-IO",
          "versions": [
            {
              "version": "2.2.1 all revisions",
              "status": "affected"
            },
            {
              "version": "2.2.5",
              "status": "affected",
              "versionType": "custom",
              "lessThan": "2.2.5.2"
            }
          ]
        },
        {
          "vendor": "Hitachi Energy",
          "product": "Relion 650",
          "versions": [
            {
              "version": "1.1 all revisions",
              "status": "affected"
            },
            {
              "version": "1.2 all revisions",
              "status": "affected"
            },
            {
              "version": "1.0 all revisions",
              "status": "affected"
            },
            {
              "version": "1.3",
              "status": "affected",
              "versionType": "custom",
              "lessThan": "1.3.0.8"
            }
          ]
        },
        {
          "vendor": "Hitachi Energy",
          "product": "GMS600",
          "versions": [
            {
              "version": "1.3.0",
              "status": "affected"
            },
            {
              "version": "1.3.1.0 1.3.0.1",
              "status": "affected"
            },
            {
              "version": "1.2.0",
              "status": "affected"
            }
          ]
        },
        {
          "vendor": "Hitachi Energy",
          "product": "PWC600",
          "versions": [
            {
              "version": "1.0.1",
              "status": "affected",
              "versionType": "custom",
              "lessThanOrEqual": "1.0.1.4"
            },
            {
              "version": "1.1.0",
              "status": "affected",
              "versionType": "custom",
              "lessThanOrEqual": "1.1.0.1"
            }
          ]
        }
      ]
    }
  }
}