Lucene search

K
nvd[email protected]NVD:CVE-2024-28021
HistoryJun 11, 2024 - 2:15 p.m.

CVE-2024-28021

2024-06-1114:15:10
CWE-295
web.nvd.nist.gov
5
vulnerability
foxman-un/unem
message queueing
certificate validation
confidentiality
integrity
exploit

CVSS3

7.4

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N

EPSS

0.001

Percentile

39.6%

A vulnerability exists in the FOXMAN-UN/UNEM server that affects the message
queueing mechanism’s certificate validation. If exploited an attacker could spoof a trusted entity causing a loss of confidentiality
and integrity.

Affected configurations

Nvd
Node
hitachienergyfoxman-unMatchr15bpc4
OR
hitachienergyfoxman-unMatchr16bpc2
OR
hitachienergyfoxman_unMatchr15a
OR
hitachienergyfoxman_unMatchr16a
OR
hitachienergyunemMatchr15a
OR
hitachienergyunemMatchr15bpc4
OR
hitachienergyunemMatchr16a
OR
hitachienergyunemMatchr16bpc2
VendorProductVersionCPE
hitachienergyfoxman-unr15bcpe:2.3:a:hitachienergy:foxman-un:r15b:pc4:*:*:*:*:*:*
hitachienergyfoxman-unr16bcpe:2.3:a:hitachienergy:foxman-un:r16b:pc2:*:*:*:*:*:*
hitachienergyfoxman_unr15acpe:2.3:a:hitachienergy:foxman_un:r15a:*:*:*:*:*:*:*
hitachienergyfoxman_unr16acpe:2.3:a:hitachienergy:foxman_un:r16a:*:*:*:*:*:*:*
hitachienergyunemr15acpe:2.3:a:hitachienergy:unem:r15a:*:*:*:*:*:*:*
hitachienergyunemr15bcpe:2.3:a:hitachienergy:unem:r15b:pc4:*:*:*:*:*:*
hitachienergyunemr16acpe:2.3:a:hitachienergy:unem:r16a:*:*:*:*:*:*:*
hitachienergyunemr16bcpe:2.3:a:hitachienergy:unem:r16b:pc2:*:*:*:*:*:*

CVSS3

7.4

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N

EPSS

0.001

Percentile

39.6%

Related for NVD:CVE-2024-28021