Lucene search

K
cve[email protected]CVE-2023-1711
HistoryMay 30, 2023 - 7:15 p.m.

CVE-2023-1711

2023-05-3019:15:09
CWE-116
CWE-117
web.nvd.nist.gov
20
vulnerability
foxman-un
unem
logging component
remote authentication
hitachi energy
cve-2023-1711
nvd

4.4 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

4.8 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

25.1%

A vulnerability exists in a FOXMAN-UN and UNEM logging component, it only affects systems that use remote authentication to the network elements.
If exploited an attacker could obtain confidential information.

List of CPEs:

  • cpe:2.3:a:hitachienergy:foxman_un:R9C:::::::*

  • cpe:2.3:a:hitachienergy:foxman_un:R10C:::::::*

  • cpe:2.3:a:hitachienergy:foxman_un:R11A:::::::*

  • cpe:2.3:a:hitachienergy:foxman_un:R11B:::::::*

  • cpe:2.3:a:hitachienergy:foxman_un:R14A:::::::*

  • cpe:2.3:a:hitachienergy:foxman_un:R14B:::::::*

  • cpe:2.3:a:hitachienergy:foxman_un:R15A:::::::*

  • cpe:2.3:a:hitachienergy:foxman_un:R15B:::::::*

  • cpe:2.3:a:hitachienergy:foxman_un:R16A:::::::*

  • cpe:2.3:a:hitachienergy:unem:R9C:::::::*

  • cpe:2.3:a:hitachienergy: unem :R10C:::::::*

  • cpe:2.3:a:hitachienergy: unem :R11A:::::::*

  • cpe:2.3:a:hitachienergy: unem :R11B:::::::*

  • cpe:2.3:a:hitachienergy: unem :R14A:::::::*

  • cpe:2.3:a:hitachienergy: unem :R14B:::::::*

  • cpe:2.3:a:hitachienergy: unem :R15A:::::::*

  • cpe:2.3:a:hitachienergy: unem :R15B:::::::*

  • cpe:2.3:a:hitachienergy: unem :R16A:::::::*

Affected configurations

NVD
Node
hitachienergyfoxman_unMatchr9c
OR
hitachienergyfoxman_unMatchr10c
OR
hitachienergyfoxman_unMatchr11a
OR
hitachienergyfoxman_unMatchr11b
OR
hitachienergyfoxman_unMatchr14a
OR
hitachienergyfoxman_unMatchr14b
OR
hitachienergyfoxman_unMatchr15a
OR
hitachienergyfoxman_unMatchr15b
OR
hitachienergyfoxman_unMatchr16a
OR
hitachienergyunemMatchr9c
OR
hitachienergyunemMatchr10c
OR
hitachienergyunemMatchr11a
OR
hitachienergyunemMatchr11b
OR
hitachienergyunemMatchr14a
OR
hitachienergyunemMatchr14b
OR
hitachienergyunemMatchr15a
OR
hitachienergyunemMatchr15b
OR
hitachienergyunemMatchr16a

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "product": "FOXMAN-UN",
    "vendor": "Hitachi Energy",
    "versions": [
      {
        "status": "affected",
        "version": "FOXMAN-UN R16A"
      },
      {
        "status": "affected",
        "version": "FOXMAN-UN R15B"
      },
      {
        "status": "affected",
        "version": "FOXMAN-UN R15A"
      },
      {
        "status": "affected",
        "version": "FOXMAN-UN R14B"
      },
      {
        "status": "affected",
        "version": "FOXMAN-UN R14A"
      },
      {
        "status": "affected",
        "version": "FOXMAN-UN R11B"
      },
      {
        "status": "affected",
        "version": "FOXMAN-UN R11A"
      },
      {
        "status": "affected",
        "version": "FOXMAN-UN R10C"
      },
      {
        "status": "affected",
        "version": "FOXMAN-UN R9C"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "UNEM",
    "vendor": "Hitachi Energy",
    "versions": [
      {
        "status": "affected",
        "version": "UNEM R16A"
      },
      {
        "status": "affected",
        "version": "UNEM R15B"
      },
      {
        "status": "affected",
        "version": "UNEM R15A"
      },
      {
        "status": "affected",
        "version": "UNEM R14B"
      },
      {
        "status": "affected",
        "version": "UNEM R14A"
      },
      {
        "status": "affected",
        "version": "UNEM R11B"
      },
      {
        "status": "affected",
        "version": "UNEM R11A"
      },
      {
        "status": "affected",
        "version": "UNEM R10C"
      },
      {
        "status": "affected",
        "version": "UNEM R9C"
      }
    ]
  }
]

4.4 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

4.8 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

25.1%

Related for CVE-2023-1711