Lucene search

K
vulnrichmentHitachi EnergyVULNRICHMENT:CVE-2024-2462
HistoryJun 11, 2024 - 12:48 p.m.

CVE-2024-2462

2024-06-1112:48:57
CWE-297
Hitachi Energy
github.com
1
data interception
falsified exchanges
client-server

CVSS4

6.8

Attack Vector

PHYSICAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

ACTIVE

CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:A/VC:L/SC:L/VI:N/SI:N/VA:H/SA:H

AI Score

6.9

Confidence

High

SSVC

Exploitation

none

Automatable

no

Technical Impact

partial

Allow attackers to intercept or falsify data exchanges between the client
and the server

ADP Affected

[
  {
    "cpes": [
      "cpe:2.3:a:hitachi_energy:foxman-un:*:*:*:*:*:*:*:*"
    ],
    "vendor": "hitachi_energy",
    "product": "foxman-un",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "versionType": "custom",
        "lessThanOrEqual": "FOXMAN-UN R16B PC2"
      },
      {
        "status": "unaffected",
        "version": "FOXMAN-UN R16B PC3"
      },
      {
        "status": "affected",
        "version": "0",
        "versionType": "custom",
        "lessThanOrEqual": "FOXMAN-UN R15B PC4"
      },
      {
        "status": "unaffected",
        "version": "FOXMAN-UN R15B PC5"
      },
      {
        "status": "affected",
        "version": "FOXMAN-UN R16A"
      },
      {
        "status": "affected",
        "version": "FOXMAN-UN R15A"
      }
    ],
    "defaultStatus": "unaffected"
  },
  {
    "cpes": [
      "cpe:2.3:a:hitachi_energy:fox61x:*:*:*:*:*:*:*:*"
    ],
    "vendor": "hitachi_energy",
    "product": "fox61x",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "FOX61x R16B",
        "versionType": "custom"
      },
      {
        "status": "unaffected",
        "version": "FOX61x R16B"
      }
    ],
    "defaultStatus": "unaffected"
  },
  {
    "cpes": [
      "cpe:2.3:a:hitachi_energy:foxcst:*:*:*:*:*:*:*:*"
    ],
    "vendor": "hitachi_energy",
    "product": "foxcst",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "FOXCST_16.2.1",
        "versionType": "custom"
      },
      {
        "status": "unaffected",
        "version": "FOXCST_16.2.1"
      }
    ],
    "defaultStatus": "unaffected"
  },
  {
    "cpes": [
      "cpe:2.3:a:hitachi_energy:unem:*:*:*:*:*:*:*:*"
    ],
    "vendor": "hitachi_energy",
    "product": "unem",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "versionType": "custom",
        "lessThanOrEqual": "UNEM R16B PC2"
      },
      {
        "status": "unaffected",
        "version": "UNEM R16B PC3"
      },
      {
        "status": "affected",
        "version": "0",
        "versionType": "custom",
        "lessThanOrEqual": "UNEM R15B PC4"
      },
      {
        "status": "unaffected",
        "version": "UNEM R15B PC5"
      },
      {
        "status": "affected",
        "version": "UNEM R16A"
      },
      {
        "status": "affected",
        "version": "UNEM R15A"
      }
    ],
    "defaultStatus": "unaffected"
  },
  {
    "cpes": [
      "cpe:2.3:a:hitachi_energy:xmc20:*:*:*:*:*:*:*:*"
    ],
    "vendor": "hitachi_energy",
    "product": "xmc20",
    "versions": [
      {
        "status": "affected",
        "version": "R16B"
      }
    ],
    "defaultStatus": "unaffected"
  },
  {
    "cpes": [
      "cpe:2.3:a:hitachi_energy:ecst:*:*:*:*:*:*:*:*"
    ],
    "vendor": "hitachi_energy",
    "product": "ecst",
    "versions": [
      {
        "status": "affected",
        "version": "ECST_16.2.1"
      }
    ],
    "defaultStatus": "unaffected"
  }
]

CVSS4

6.8

Attack Vector

PHYSICAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

ACTIVE

CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:A/VC:L/SC:L/VI:N/SI:N/VA:H/SA:H

AI Score

6.9

Confidence

High

SSVC

Exploitation

none

Automatable

no

Technical Impact

partial

Related for VULNRICHMENT:CVE-2024-2462