When minor short-circuiting abnormality of a battery is determined at timing t4, a battery ECU turns on a fail-safe flag to perform a fail-safe process. In the fail-safe process, the battery ECU changes a discharging power limiting value from a first discharging power limiting value to a second discharging power limiting value that is smaller than the first discharging power limiting value as time elapses, and changes a charging power limiting value from a first charging power limiting value to a second charging power limiting value that is greater than the first charging power limiting value as time elapses.