Lucene search

K
vulnrichmentHitachi EnergyVULNRICHMENT:CVE-2024-28020
HistoryJun 11, 2024 - 6:20 p.m.

CVE-2024-28020

2024-06-1118:20:35
CWE-286
Hitachi Energy
github.com
4
password reuse
foxman-un/unem
server management
malicious user
access extension

CVSS3

8

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

HIGH

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H

AI Score

6.6

Confidence

Low

EPSS

0.001

Percentile

20.0%

SSVC

Exploitation

none

Automatable

no

Technical Impact

total

A user/password reuse vulnerability exists in the FOXMAN-UN/UNEMΒ  application and server management. If exploited a malicious user
could use the passwords and login information to extend access on
the server and other services.

ADP Affected

[
  {
    "cpes": [
      "cpe:2.3:a:hitachienergy:foxman-un:*:*:*:*:*:*:*:*"
    ],
    "vendor": "hitachienergy",
    "product": "foxman-un",
    "versions": [
      {
        "status": "affected",
        "version": "r16b"
      },
      {
        "status": "affected",
        "version": "r15b"
      },
      {
        "status": "affected",
        "version": "r15a"
      },
      {
        "status": "affected",
        "version": "r16a"
      }
    ],
    "defaultStatus": "unaffected"
  },
  {
    "cpes": [
      "cpe:2.3:a:hitachienergy:unem:*:*:*:*:*:*:*:*"
    ],
    "vendor": "hitachienergy",
    "product": "unem",
    "versions": [
      {
        "status": "affected",
        "version": "r15b"
      },
      {
        "status": "affected",
        "version": "r16b"
      },
      {
        "status": "affected",
        "version": "r15a"
      },
      {
        "status": "affected",
        "version": "r16a"
      }
    ],
    "defaultStatus": "unaffected"
  }
]

CVSS3

8

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

HIGH

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H

AI Score

6.6

Confidence

Low

EPSS

0.001

Percentile

20.0%

SSVC

Exploitation

none

Automatable

no

Technical Impact

total

Related for VULNRICHMENT:CVE-2024-28020