← Back to CVE List
Vulnerability Intelligence Report
Communication between the client and server partially using CORBA over TCP/IP

CVE-2022-3929

Communication between the client and the server application of the affected products is partially done using CORBA (Common Object Request Broker Architecture) over TCP/IP. This protocol is not encrypted and allows tracing of internal messages. This issue affects * FOXMAN-UN product: FOXMAN-UN R15B, FOXMAN-UN R15A, FOXMAN-UN R14B, FOXMAN-UN R14A, FOXMAN-UN R11B, FOXMAN-UN R11A, FOXMAN-UN R10C, FOXMAN-UN R9C; * UNEM product: UNEM R15B, UNEM R15A, UNEM R14B, UNEM R14A, UNEM R11B, UNEM R11A, UNEM R10C, UNEM R9C. List of CPEs: * cpe:2.3:a:hitachienergy:foxman-un:R15B:*:*:*:*:*:*:* * cpe:2.3:a:hitachienergy:foxman-un:R15A:*:*:*:*:*:*:* * cpe:2.3:a:hitachienergy:foxman-un:R14B:*:*:*:*:*:*:* * cpe:2.3:a:hitachienergy:foxman-un:R14A:*:*:*:*:*:*:* * cpe:2.3:a:hitachienergy:foxman-un:R11B:*:*:*:*:*:*:* * cpe:2.3:a:hitachienergy:foxman-un:R11A:*:*:*:*:*:*:* * cpe:2.3:a:hitachienergy:foxman-un:R10C:*:*:*:*:*:*:* * cpe:2.3:a:hitachienergy:foxman-un:R9C:*:*:*:*:*:*:* * cpe:2.3:a:hitachienergy:unem:R15B:*:*:*:*:*:*:* * cpe:2.3:a:hitachienergy:unem:R15A:*:*:*:*:*:*:* * cpe:2.3:a:hitachienergy:unem:R14B:*:*:*:*:*:*:* * cpe:2.3:a:hitachienergy:unem:R14A:*:*:*:*:*:*:* * cpe:2.3:a:hitachienergy:unem:R11B:*:*:*:*:*:*:* * cpe:2.3:a:hitachienergy:unem:R11A:*:*:*:*:*:*:* * cpe:2.3:a:hitachienergy:unem:R10C:*:*:*:*:*:*:* * cpe:2.3:a:hitachienergy:unem:R9C:*:*:*:*:*:*:*

No Active Exploit Signals
CVSS Base Score
8.3
HIGH
Exploitability:1.7
Impact Score:6.1
EPSS Probability:0.39%
Executive Threat Verdict
Evaluating...
Evaluating Threat Landscape...
Assessing known weaponization, exploitation telemetry, and federal advisories.
Attack Surface
—
Authentication
—
Weaponization
—
SSVC Action
—

Weaknesses (CWE)

CWE-319 ↗CWE-319 Cleartext Transmission of Sensitive Information

Affected Products & Versions

Vendor Product Affected Versions
Hitachi Energy FOXMAN-UN FOXMAN-UN R16A (unaffected), FOXMAN-UN R15B (affected), FOXMAN-UN R15A (affected), FOXMAN-UN R14B (affected), FOXMAN-UN R14A (affected), FOXMAN-UN R11B (affected), FOXMAN-UN R11A (affected), FOXMAN-UN R10C (affected), FOXMAN-UN R9C (affected)
Hitachi Energy UNEM UNEM R16A (unaffected), UNEM R15B (affected), UNEM R15A (affected), UNEM R14B (affected), UNEM R14A (affected), UNEM R11B (affected), UNEM R11A (affected), UNEM R10C (affected), UNEM R9C (affected)

References & Technical Advisories

No reference links found.

Threat Intelligence Signals

EPSS Score
0.389%

Identity & Timeline

StatusPUBLISHED
Assigning AuthorityHitachi Energy
Reserved2022-11-10T15:40:42
Published2023-01-05T21:54:51
Patch Date2022-12-13
Last Updated2025-04-10T13:51:12

LINK COPIED TO CLIPBOARD