Paper/Archive/CVE-2024-2011

CVE-2024-2011

Hitachi Energy FOXMAN-UN — A heap-based buffer overflow vulnerability exists in the FOXMAN-UN/UNEM that if exploited will generally lead to a denial of service but…

Description · from the CVE record

A heap-based buffer overflow vulnerability exists in the FOXMAN-UN/UNEM that if exploited will generally lead to a denial of service but can be used to execute arbitrary code, which is usually outside the scope of a program's implicit security policy

Affected

ProductAffectedFixed inSource
FOXMAN-UNFOXMAN-UN R16B PC2–CNA
FOXMAN-UNFOXMAN-UN R15B PC4–CNA
FOXMAN-UNFOXMAN-UN R16A–CNA
FOXMAN-UNFOXMAN-UN R15A–CNA
UNEMUNEM R16B PC2–CNA
UNEMUNEM R15B PC4–CNA
UNEMUNEM R16A–CNA
UNEMUNEM R15A–CNA
foxman-unFOXMAN-UN R16B PC2–CISA-ADP
foxman-unFOXMAN-UN R15B PC4–CISA-ADP
foxman-unFOXMAN-UN R16A–CISA-ADP
foxman-unFOXMAN-UN R15A–CISA-ADP

Scores by source

NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Hitachi Energy (CNA)8.6CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H
CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: partial

References

refpublisher.hitachienergy.com/preview?DocumentId=8DBD000201&languageCode=en&Preview=truerefpublisher.hitachienergy.com/preview?DocumentId=8DBD000194&languageCode=en&Preview=true