Paper/Archive/CVE-2024-2012

CVE-2024-2012

Hitachi Energy FOXMAN-UN — vulnerability exists in the FOXMAN-UN/UNEM server / API Gateway that if exploited an attacker could use to allow unintended commands or…

Description · from the CVE record

vulnerability exists in the FOXMAN-UN/UNEM server / API Gateway that if exploited an attacker could use to allow unintended commands or code to be executed on the UNEM server allowing sensitive data to be read or modified or could cause other unintended behavior

Affected

ProductAffectedFixed inSource
FOXMAN-UNFOXMAN-UN R16B PC2–CNA
FOXMAN-UNFOXMAN-UN R15B PC4–CNA
FOXMAN-UNFOXMAN-UN R16A–CNA
FOXMAN-UNFOXMAN-UN R15A–CNA
UNEMUNEM R16B PC2–CNA
UNEMUNEM R15B PC4–CNA
UNEMUNEM R15B PC5–CNA
UNEMUNEM R15A–CNA
UNEMUNEM R16A–CNA
foxman_unpc2–CISA-ADP
foxman_unsee advisorypc3CISA-ADP
foxman_unpc4–CISA-ADP

Scores by source

NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Hitachi Energy (CNA)9.1CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
CISA ADPSSVCExploitation: none · Automatable: no · Technical impact: total

References

refpublisher.hitachienergy.com/preview?DocumentId=8DBD000201&languageCode=en&Preview=true