← Back

CVE-2024-2013

nvd nist
Published: Jun 11, 2024Modified: Jun 17, 2026

JSON object

Loading...
10.0
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Exploitability: 3.9 / Impact: 6.0
Source: NVD

Description

An authentication bypass vulnerability exists in the FOXMAN-UN/UNEM server / API Gateway component that if exploited allows attackers without any access to interact with the services and the post-authentication attack surface.

Affected (9)

Hitachienergy
2 products
Foxman Un
Unem
Configuration A
9 vulnerable
Vulnerable SoftwareAffected Versions
Hitachienergy
Foxman Un
Version r15a
Foxman Un
Version r15b pc4
Foxman Un
Version r16a
Foxman Un
Version r16b pc2
Hitachienergy
Unem
Version r15a
Unem
Version r15b pc4
Unem
Version r15b pc5
Unem
Version r16b
Unem
Version r16b pc2

Related CWEs

CWE-288
Authentication Bypass Using an Alternate Path or Channel
A product requires authentication, but the product has an alternate path or channel that does not require authentication.
CWE-306
Missing Authentication for Critical Function
The product does not perform any authentication for functionality that requires a provable user identity or consumes a significant amount of resources.

References (2)

Source: cybersecurity@hitachienergy.com
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory

Timeline

No history available yet.