THREATINT

We use these services and cookies to improve your user experience. You may opt out if you wish, however, this may limit some features on this site.

Please see our statement on Data Privacy.

Zendesk (Helpdesk and Chat)

Ok

PUBLISHED

CVE-2024-28021

Assigner:Hitachi Energy (e383dce4-0c27-4495-91c4-0db157728d17)
Reserved:2024-02-29
Published:2024-06-11
Updated:2024-06-11

Description

A vulnerability exists in the FOXMAN-UN/UNEM server that affects the message queueing mechanism’s certificate validation. If exploited an attacker could spoof a trusted entity causing a loss of confidentiality and integrity.



HIGH: 8.0CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N

Problem types

CWE-295 Improper Certificate Validation

Product status

Default status
unaffected

FOXMAN-UN R16B PC2
affected

FOXMAN-UN R16B PC3
unaffected

FOXMAN-UN R15B PC4
affected

FOXMAN-UN R15B PC5
unaffected

Default status
unaffected

UNEM R16B PC2
affected

UNEM R16B PC3
unaffected

UNEM R15B PC4
affected

UNEM R15B PC5
unaffected

References

https://publisher.hitachienergy.com/preview?DocumentId=8DBD000201&languageCode=en&Preview=true

https://publisher.hitachienergy.com/preview?DocumentId=8DBD000194&languageCode=en&Preview=true

cve.org CVE-2024-28021

nvd.nist.gov CVE-2024-28021

Download JSON

Share this page
https://cve.threatint.com/CVE/CVE-2024-28021