CVE-2024-28020

HIGH
STIX 2.1 vulnerability

Record summary

CVE-2024-28020 has a selected CVSS score of 8.0 (high).

Description

A user/password reuse vulnerability exists in the FOXMAN-UN/UNEM application and server management. If exploited a malicious high-privileged user could use the passwords and login information through complex routines to extend access on the server and other services.

Description source: CVE List

Exploitation context

CISA SSVC decision

ExploitationNone
AutomatableNo
Technical impactTotal

CISA Coordinator · SSVC 2.0.3 · Evaluated Jun 11, 2024 · Source: CVE List

Affected products and versions

2
ProductSourceVersion range

FOXMAN-UN

Browse Hitachi Energy / FOXMAN-UN

Default status: unaffected

CVE ListFOXMAN-UN R16Baffected
FOXMAN-UN R15Baffected
FOXMAN-UN R16Aaffected
FOXMAN-UN R15Aaffected
r16baffected
r15baffected
r15aaffected
r16aaffected

UNEM

Browse Hitachi Energy / UNEM

Default status: unaffected

CVE ListUNEM R16Baffected
UNEM R15Baffected
UNEM R16Aaffected
UNEM R15Aaffected
r15baffected
r16baffected
r15aaffected
r16aaffected

References

3