Skip to content
CVE PROGRAM SOURCE RECORD6.5 Medium

CVE-2024-28022

A vulnerability exists in the UNEM server / APIGateway that if exploited allows a malicious user to perform an arbitrary number of

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Hitachi Energy

Description

A vulnerability exists in the UNEM server / APIGateway that if exploited allows a malicious user to perform an arbitrary number of authentication attempts using different passwords, and eventually gain access to other components in the same security realm using the targeted account.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Hitachi Energy FOXMAN-UN

Default version status: unaffected

  • FOXMAN-UN R16Baffected
  • FOXMAN-UN R15Baffected
  • FOXMAN-UN R16Aaffected
  • FOXMAN-UN R15Aaffected

Hitachi Energy UNEM

Default version status: unaffected

  • UNEM R16Baffected
  • UNEM R15Baffected
  • UNEM 16Aaffected
  • UNEM 15Aaffected

References