by Kastro
Paper/Archive/CVE-2024-2013

CVE-2024-2013

Hitachi Energy FOXMAN-UN — An authentication bypass vulnerability exists in the FOXMAN-UN/UNEM server / API Gateway component that if exploited allows attackers wit…

EPSS 0.7%CVSS 10.0
critical.is priorityof 100
41
CVSS 10.0 (CNA, NVD agree)10.0 / 10 × 3030.0Not in CISA KEV+300.0EPSS percentile 52.4.524 × 2010.5No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

An authentication bypass vulnerability exists in the FOXMAN-UN/UNEM server / API Gateway component that if exploited allows attackers without any access to interact with the services and the post-authentication attack surface.

Affected

ProductAffectedFixed inSource
FOXMAN-UNFOXMAN-UN R16B PC2–CNA
FOXMAN-UNFOXMAN-UN R15B PC4–CNA
FOXMAN-UNFOXMAN-UN R16A–CNA
FOXMAN-UNFOXMAN-UN R15A–CNA
UNEMUNEM R16B PC2–CNA
UNEMUNEM R15B PC4–CNA
UNEMUNEM R15B PC5–CNA
UNEMUNEM R16B–CNA
UNEMUNEM R15A–CNA

Scores by source

Hitachi Energy (CNA)10.0CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
NVD10.0CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
CISA ADPSSVCExploitation: none · Automatable: no · Technical impact: partial

References

refpublisher.hitachienergy.com/preview?DocumentId=8DBD000201&languageCode=en&Preview=true