CVE-2024-28023

Published: Jun 11, 2024Modified: Jun 17, 2026Deferred

5.7

Vector

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:L

Exploitability: 1.5 / Impact: 3.7

Source: cybersecurity@hitachienergy.com (Secondary)

Description

A vulnerability exists in the message queueing mechanism that if exploited can lead to the exposure of resources or functionality to unintended actors, possibly providing attackers with sensitive information or even execute arbitrary code.

Related CWEs

CWE-259

Use of Hard-coded Password

The product contains a hard-coded password, which it uses for its own inbound authentication or for outbound communication to external components.

References (2)

https://publisher.hitachienergy.com/preview?DocumentId=8DBD000201&languageCode=en&Preview=true

Source: cybersecurity@hitachienergy.com

https://publisher.hitachienergy.com/preview?DocumentId=8DBD000201&languageCode=en&Preview=true

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.