CVE-2024-2012

Published: Jun 11, 2024Modified: Jun 17, 2026

9.8

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Exploitability: 3.9 / Impact: 5.9

Source: NVD

Description

vulnerability exists in the FOXMAN-UN/UNEM server / API Gateway that if exploited an attacker could use to allow unintended commands or code to be executed on the UNEM server allowing sensitive data to be read or modified or could cause other unintended behavior

Affected (9)

Products: Hitachienergy: Foxman Un, Unem

Hitachienergy

2 products

Foxman Un

Unem

Configuration A

9 vulnerable

Vulnerable Software	Affected Versions
Hitachienergy Foxman Un	Version r15a
Hitachienergy Foxman Un	Version r15b pc4
Hitachienergy Foxman Un	Version r16a
Hitachienergy Foxman Un	Version r16b pc2
Hitachienergy Unem	Version r15a
Hitachienergy Unem	Version r15b pc4
Hitachienergy Unem	Version r15b pc5
Hitachienergy Unem	Version r16a
Hitachienergy Unem	Version r16b pc2

Related CWEs

CWE-288

Authentication Bypass Using an Alternate Path or Channel

A product requires authentication, but the product has an alternate path or channel that does not require authentication.

References (2)

https://publisher.hitachienergy.com/preview?DocumentId=8DBD000201&languageCode=en&Preview=true

Source: cybersecurity@hitachienergy.com

Vendor Advisory

https://publisher.hitachienergy.com/preview?DocumentId=8DBD000201&languageCode=en&Preview=true

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.