Skip to content
CVE PROGRAM SOURCE RECORD10.0 Critical

CVE-2024-2013

An authentication bypass vulnerability exists in the FOXMAN-UN/UNEM server /

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Hitachi Energy

Description

An authentication bypass vulnerability exists in the FOXMAN-UN/UNEM server / API Gateway component that if exploited allows attackers without any access to interact with the services and the post-authentication attack surface.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Hitachi Energy FOXMAN-UN

Default version status: unaffected

  • FOXMAN-UN R16B PC2affected
  • FOXMAN-UN R16B PC3 to ≤ FOXMAN-UN R16B PC4unaffected
  • FOXMAN-UN R15B PC4affected
  • FOXMAN-UN R15B PC5unaffected
  • FOXMAN-UN R16Aaffected
  • FOXMAN-UN R15Aaffected

Hitachi Energy UNEM

Default version status: unaffected

  • UNEM R16B PC2affected
  • UNEM R16B PC3 to ≤ UNEM R16B PC4unaffected
  • UNEM R15B PC4affected
  • UNEM R15B PC5affected
  • UNEM R16Baffected
  • UNEM R15Aaffected

References