Lucene search
Hitachi EnergyCVE-2024-28021HistoryJun 11, 2024 - 2:15 p.m.
CVE-2024-28021
2024-06-1114:15:10
CWE-295
Hitachi Energy
web.nvd.nist.gov
31
vulnerability
foxman-un/unem
message queueing
certificate validation
exploitation
loss of confidentiality
loss of integrity
CVSS3
8
Attack Vector
ADJACENT
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N
AI Score
7.7
Confidence
High
EPSS
0.001
Percentile
39.6%
A vulnerability exists in the FOXMAN-UN/UNEM server that affects the message
queueing mechanism’s certificate validation. If exploited an attacker could spoof a trusted entity causing a loss of confidentiality
and integrity.
Affected configurations
Node
hitachienergyfoxman-unMatchr15bpc4
ORhitachienergyfoxman-unMatchr16bpc2
ORhitachienergyfoxman_unMatchr15a
ORhitachienergyfoxman_unMatchr16a
ORhitachienergyunemMatchr15a
ORhitachienergyunemMatchr15bpc4
ORhitachienergyunemMatchr16a
ORhitachienergyunemMatchr16bpc2
| Vendor | Product | Version | CPE |
|---|---|---|---|
| hitachienergy | foxman-un | r15b | cpe:2.3:a:hitachienergy:foxman-un:r15b:pc4:*:*:*:*:*:* |
| hitachienergy | foxman-un | r16b | cpe:2.3:a:hitachienergy:foxman-un:r16b:pc2:*:*:*:*:*:* |
| hitachienergy | foxman_un | r15a | cpe:2.3:a:hitachienergy:foxman_un:r15a:*:*:*:*:*:*:* |
| hitachienergy | foxman_un | r16a | cpe:2.3:a:hitachienergy:foxman_un:r16a:*:*:*:*:*:*:* |
| hitachienergy | unem | r15a | cpe:2.3:a:hitachienergy:unem:r15a:*:*:*:*:*:*:* |
| hitachienergy | unem | r15b | cpe:2.3:a:hitachienergy:unem:r15b:pc4:*:*:*:*:*:* |
| hitachienergy | unem | r16a | cpe:2.3:a:hitachienergy:unem:r16a:*:*:*:*:*:*:* |
| hitachienergy | unem | r16b | cpe:2.3:a:hitachienergy:unem:r16b:pc2:*:*:*:*:*:* |
CNA Affected
[
{
"defaultStatus": "unaffected",
"product": "FOXMAN-UN",
"vendor": "Hitachi Energy",
"versions": [
{
"status": "affected",
"version": "FOXMAN-UN R16B PC2",
"versionType": "custom"
},
{
"lessThanOrEqual": "FOXMAN-UN R16B PC4",
"status": "unaffected",
"version": "FOXMAN-UN R16B PC3",
"versionType": "custom"
},
{
"status": "affected",
"version": "FOXMAN-UN R15B PC4",
"versionType": "custom"
},
{
"status": "unaffected",
"version": "FOXMAN-UN R15B PC5",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unaffected",
"product": "UNEM",
"vendor": "Hitachi Energy",
"versions": [
{
"status": "affected",
"version": "UNEM R16B PC2",
"versionType": "custom"
},
{
"lessThanOrEqual": "UNEM R16B PC4",
"status": "unaffected",
"version": "UNEM R16B PC3",
"versionType": "custom"
},
{
"status": "affected",
"version": "UNEM R15B PC4",
"versionType": "custom"
},
{
"status": "unaffected",
"version": "UNEM R15B PC5",
"versionType": "custom"
}
]
}
]Related
nvd
nvd
CVE-2024-28021
2024-06-11 14:15:10
cvelist
cvelist
CVE-2024-28021
2024-06-11 13:30:12
vulnrichment
vulnrichment
CVE-2024-28021
2024-06-11 13:30:12
CVSS3
8
Attack Vector
ADJACENT
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N
AI Score
7.7
Confidence
High
EPSS
0.001
Percentile
39.6%
Related for CVE-2024-28021