Hitachi Energy FOXMAN-UN and UNEM Products

🗓️ 27 Jun 2023 06:00:00Reported by Industrial Control Systems Cyber Emergency Response TeamType

ics🔗 www.cisa.gov👁 72 Views

Hitachi Energy FOXMAN-UN and UNEM Products affected by Improper Output Neutralization for Logs vulnerability with high attack complexity and potential access to sensitive information. Mitigations available for various version R16A, R15B, R15A, R14B, R14A, R11B, R11A, R10C, R9C

Reporter	Title	Published	Views	Family All 11
BDU FSTEC	The vulnerability of the FOXMAN-UN and UNEM software for managing and monitoring networks and equipment lies in the lack of mechanisms for encoding or shielding sensitive outputs, allowing attackers to access confidential data.	18 Mar 202400:00	–	bdu_fstec
CNNVD	Hitachi FOXMAN-UN 安全漏洞	30 May 202300:00	–	cnnvd
CVE	CVE-2023-1711	30 May 202318:46	–	cve
Cvelist	CVE-2023-1711	30 May 202318:46	–	cvelist
EUVD	EUVD-2023-23935	3 Oct 202520:07	–	euvd
NVD	CVE-2023-1711	30 May 202319:15	–	nvd
OSV	CVE-2023-1711	30 May 202319:15	–	osv
Prion	Authentication flaw	30 May 202319:15	–	prion
Positive Technologies	PT-2023-8824 · Unem +1 · Unem +1	30 May 202300:00	–	ptsecurity
RedhatCVE	CVE-2023-1711	23 May 202502:33	–	redhatcve

Source	Link
raw	www.raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/OT/white/2023/icsa-23-178-01.json
cisa	www.cisa.gov/news-events/ics-advisories/icsa-23-178-01
cisa	www.cisa.gov/uscert/ics/alerts/ICS-ALERT-10-301-01
cisa	www.cisa.gov/resources-tools/resources/ics-recommended-practices
cisa	www.cisa.gov/sites/default/files/publications/Cybersecurity_Best_Practices_for_Industrial_Control_Systems.pdf
cisa	www.cisa.gov/topics/industrial-control-systems
us-cert	www.us-cert.cisa.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf
cisa	www.cisa.gov/uscert/ics/tips/ICS-TIP-12-146-01B

27 Jun 2023 06:00Current

4.9Medium risk

Vulners AI Score4.9

CVSS 3.14 - 4.4

EPSS0.00241

SSVC