Lucene search

K
cvelistHitachi EnergyCVELIST:CVE-2023-1711
HistoryMay 30, 2023 - 6:46 p.m.

CVE-2023-1711

2023-05-3018:46:24
CWE-117
Hitachi Energy
www.cve.org
3
hitachi energy
foxman-un
unem
remote authentication
confidential information
vulnerability
cve-2023-1711

CVSS3

4

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

HIGH

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:U/C:H/I:N/A:N

AI Score

5.2

Confidence

High

EPSS

0.001

Percentile

24.9%

A vulnerability exists in a FOXMAN-UN and UNEM logging component, it only affects systems that use remote authentication to the network elements.
If exploited an attacker could obtain confidential information.

List of CPEs:

  • cpe:2.3:a:hitachienergy:foxman_un:R9C:::::::*

  • cpe:2.3:a:hitachienergy:foxman_un:R10C:::::::*

  • cpe:2.3:a:hitachienergy:foxman_un:R11A:::::::*

  • cpe:2.3:a:hitachienergy:foxman_un:R11B:::::::*

  • cpe:2.3:a:hitachienergy:foxman_un:R14A:::::::*

  • cpe:2.3:a:hitachienergy:foxman_un:R14B:::::::*

  • cpe:2.3:a:hitachienergy:foxman_un:R15A:::::::*

  • cpe:2.3:a:hitachienergy:foxman_un:R15B:::::::*

  • cpe:2.3:a:hitachienergy:foxman_un:R16A:::::::*

  • cpe:2.3:a:hitachienergy:unem:R9C:::::::*

  • cpe:2.3:a:hitachienergy: unem :R10C:::::::*

  • cpe:2.3:a:hitachienergy: unem :R11A:::::::*

  • cpe:2.3:a:hitachienergy: unem :R11B:::::::*

  • cpe:2.3:a:hitachienergy: unem :R14A:::::::*

  • cpe:2.3:a:hitachienergy: unem :R14B:::::::*

  • cpe:2.3:a:hitachienergy: unem :R15A:::::::*

  • cpe:2.3:a:hitachienergy: unem :R15B:::::::*

  • cpe:2.3:a:hitachienergy: unem :R16A:::::::*

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "product": "FOXMAN-UN",
    "vendor": "Hitachi Energy",
    "versions": [
      {
        "status": "affected",
        "version": "FOXMAN-UN R16A"
      },
      {
        "status": "affected",
        "version": "FOXMAN-UN R15B"
      },
      {
        "status": "affected",
        "version": "FOXMAN-UN R15A"
      },
      {
        "status": "affected",
        "version": "FOXMAN-UN R14B"
      },
      {
        "status": "affected",
        "version": "FOXMAN-UN R14A"
      },
      {
        "status": "affected",
        "version": "FOXMAN-UN R11B"
      },
      {
        "status": "affected",
        "version": "FOXMAN-UN R11A"
      },
      {
        "status": "affected",
        "version": "FOXMAN-UN R10C"
      },
      {
        "status": "affected",
        "version": "FOXMAN-UN R9C"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "UNEM",
    "vendor": "Hitachi Energy",
    "versions": [
      {
        "status": "affected",
        "version": "UNEM R16A"
      },
      {
        "status": "affected",
        "version": "UNEM R15B"
      },
      {
        "status": "affected",
        "version": "UNEM R15A"
      },
      {
        "status": "affected",
        "version": "UNEM R14B"
      },
      {
        "status": "affected",
        "version": "UNEM R14A"
      },
      {
        "status": "affected",
        "version": "UNEM R11B"
      },
      {
        "status": "affected",
        "version": "UNEM R11A"
      },
      {
        "status": "affected",
        "version": "UNEM R10C"
      },
      {
        "status": "affected",
        "version": "UNEM R9C"
      }
    ]
  }
]

CVSS3

4

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

HIGH

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:U/C:H/I:N/A:N

AI Score

5.2

Confidence

High

EPSS

0.001

Percentile

24.9%

Related for CVELIST:CVE-2023-1711