Lucene search
HistoryJun 11, 2024 - 7:16 p.m.
CVE-2024-28022
vulnerability
foxman-un
unem
apigateway
malicious access
authentication
exploited
CVSS3
5.6
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
LOW
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L
EPSS
0.001
Percentile
17.7%
A vulnerability exists in the FOXMAN-UN/UNEM server / APIGateway that
if exploited allows a malicious user to perform an arbitrary number
of authentication attempts using different passwords, and
eventually gain access to the targeted account.
Affected configurations
Node
hitachienergyfoxman-unMatchr15a
ORhitachienergyfoxman-unMatchr15b
ORhitachienergyfoxman-unMatchr16a
ORhitachienergyfoxman-unMatchr16b
ORhitachienergyunemMatchr15a
ORhitachienergyunemMatchr15b
ORhitachienergyunemMatchr16a
ORhitachienergyunemMatchr16b
| Vendor | Product | Version | CPE |
|---|---|---|---|
| hitachienergy | foxman-un | r15a | cpe:2.3:a:hitachienergy:foxman-un:r15a:*:*:*:*:*:*:* |
| hitachienergy | foxman-un | r15b | cpe:2.3:a:hitachienergy:foxman-un:r15b:*:*:*:*:*:*:* |
| hitachienergy | foxman-un | r16a | cpe:2.3:a:hitachienergy:foxman-un:r16a:*:*:*:*:*:*:* |
| hitachienergy | foxman-un | r16b | cpe:2.3:a:hitachienergy:foxman-un:r16b:*:*:*:*:*:*:* |
| hitachienergy | unem | r15a | cpe:2.3:a:hitachienergy:unem:r15a:*:*:*:*:*:*:* |
| hitachienergy | unem | r15b | cpe:2.3:a:hitachienergy:unem:r15b:*:*:*:*:*:*:* |
| hitachienergy | unem | r16a | cpe:2.3:a:hitachienergy:unem:r16a:*:*:*:*:*:*:* |
| hitachienergy | unem | r16b | cpe:2.3:a:hitachienergy:unem:r16b:*:*:*:*:*:*:* |
Related
vulnrichment
vulnrichment
CVE-2024-28022
2024-06-11 18:15:42
cve
cve
CVE-2024-28022
2024-06-11 19:16:06
cvelist
cvelist
CVE-2024-28022
2024-06-11 18:15:42
CVSS3
5.6
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
LOW
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L
EPSS
0.001
Percentile
17.7%
Related for NVD:CVE-2024-28022