Vulnerability Intelligence Report
CVE-2024-28020
A user/password reuse vulnerability exists in the FOXMAN-UN/UNEM application and server management. If exploited a malicious high-privileged user could use the passwords and login information through complex routines to extend access on the server and other services.
No Active Exploit Signals
CVSS Base Score
8.0
HIGH
Exploitability:1.4
Impact Score:6.1
EPSS Probability:0.37%
Executive Threat Verdict
Evaluating...
Evaluating Threat Landscape...
Assessing known weaponization, exploitation telemetry, and federal advisories.
Attack Surface
—
Authentication
—
Weaponization
—
SSVC Action
—
Weaknesses (CWE)
CWE-286 ↗CWE-286 Incorrect User Management
Affected Products & Versions
| Vendor | Product | Affected Versions |
|---|---|---|
| Hitachi Energy | FOXMAN-UN | FOXMAN-UN R16B (affected), FOXMAN-UN R15B (affected), FOXMAN-UN R16A (affected), FOXMAN-UN R15A (affected) |
| Hitachi Energy | UNEM | UNEM R16B (affected), UNEM R15B (affected), UNEM R16A (affected), UNEM R15A (affected) |
References & Technical Advisories
No reference links found.
Threat Intelligence Signals
EPSS Score
0.367%
GitHub Advisory
Identity & Timeline
| Status | PUBLISHED |
| Assigning Authority | Hitachi Energy |
| Reserved | 2024-02-29T13:42:00 |
| Published | 2024-06-11T18:20:35 |
| Last Updated | 2024-10-29T14:22:19 |
Community Chatter & Buzz