← Back

CVE-2024-28020

nvd nist
Published: Jun 11, 2024Modified: Jun 17, 2026

JSON object

Loading...
8.0
Vector
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H
Exploitability: 1.3 / Impact: 6.0
Source: NVD

Description

A user/password reuse vulnerability exists in the FOXMAN-UN/UNEM application and server management. If exploited a malicious high-privileged user could use the passwords and login information through complex routines to extend access on the server and other services.

Affected (8)

Hitachienergy
2 products
Foxman Un
Unem
Configuration A
8 vulnerable
Vulnerable SoftwareAffected Versions
Hitachienergy
Foxman Un
Version r15a
Foxman Un
Version r15b
Foxman Un
Version r16a
Foxman Un
Version r16b
Hitachienergy
Unem
Version r15a
Unem
Version r15b
Unem
Version r16a
Unem
Version r16b

Related CWEs

CWE-286
Incorrect User Management
The product does not properly manage a user within its environment.

References (4)

Source: cybersecurity@hitachienergy.com
Vendor Advisory
Source: cybersecurity@hitachienergy.com
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory

Timeline

No history available yet.