CVE-2024-2012: fallo crítico en Hitachi Energy FOXMAN-UN
Publicada el · Actualizada el
Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.
28Vexday Risk Score
Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.
ssvc Trackcvss 9.1epss 0.6%
vulnerability exists in the FOXMAN-UN/UNEM server / API Gateway that if exploited an attacker could use to allow unintended commands or
code to be executed on the UNEM server allowing sensitive data to
be read or modified or could cause other unintended behavior
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
CVEs relacionadas — Hitachi Energy FOXMAN-UN
En el mismo producto, de las más peligrosas a las menos.
CVE-2024-2013CRITICALCVE-2024-2013EPSS 0.7%CVE-2022-3927HIGHThe affected products store public and private key that are used to sign and protect custom parameter set files from modification.EPSS 0.6%CVE-2024-2011HIGHCVE-2024-2011EPSS 0.5%CVE-2022-3929HIGHCommunication between the client and server partially using CORBA over TCP/IPEPSS 0.4%CVE-2024-28020HIGHCVE-2024-28020EPSS 0.4%CVE-2024-28022MEDIUMCVE-2024-28022EPSS 0.4%