Lucene search

K
vulnrichmentHitachi EnergyVULNRICHMENT:CVE-2024-2461
HistoryJun 11, 2024 - 12:57 p.m.

CVE-2024-2461

2024-06-1112:57:04
CWE-23
Hitachi Energy
github.com
5
exploit
file system
traversal
restricted access

CVSS4

6.9

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:N/SC:N/VI:H/SI:N/VA:N/SA:N

AI Score

6.8

Confidence

Low

EPSS

0

Percentile

9.0%

SSVC

Exploitation

none

Automatable

no

Technical Impact

partial

If exploited an attacker could traverse the file system to access
files or directories that would otherwise be inaccessible

CNA Affected

[
  {
    "vendor": "Hitachi Energy",
    "product": "FOX61x",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "versionType": "custom",
        "lessThanOrEqual": "FOX61x R16B Revision E (cesm3_r16b04_02,  cesne_r16b04_02 and  f10ne_r16b04_02)"
      },
      {
        "status": "unaffected",
        "version": "FOX61x R16B Revision G, version (cesm3_r16b04_07,  cesne_r16b04_07, f10ne_r16b04_07)",
        "versionType": "custom"
      },
      {
        "status": "affected",
        "version": "FOX61x R15B",
        "versionType": "custom"
      },
      {
        "status": "unaffected",
        "version": "FOX61X R16B Revision G,  (cesm3_r16b04_07, cesne_r16b04_07, f10ne_r16b04_07)"
      },
      {
        "status": "affected",
        "version": "FOX61x R16A"
      },
      {
        "status": "affected",
        "version": "FOX61x R15A"
      }
    ],
    "defaultStatus": "unaffected"
  },
  {
    "vendor": "Hitachi Energy",
    "product": "XMC20",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "versionType": "custom",
        "lessThanOrEqual": "XMC20 R16B Revision C (cent2_r16b04_02,  co5ne_r16b04_02)"
      },
      {
        "status": "unaffected",
        "version": "XMC20 R16B Revision D, version  (cent2_r16b04_07, co5ne_r16b04_07)",
        "versionType": "custom"
      },
      {
        "status": "affected",
        "version": "XMC20 R15B",
        "versionType": "custom"
      },
      {
        "status": "unaffected",
        "version": "XMC20 R16B Revision D, version (cent2_r16b04_07, co5ne_r16b04_07)",
        "versionType": "custom"
      },
      {
        "status": "affected",
        "version": "XMC20 R16A",
        "versionType": "custom"
      },
      {
        "status": "affected",
        "version": "XMC20 R15A",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unaffected"
  }
]

CVSS4

6.9

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:N/SC:N/VI:H/SI:N/VA:N/SA:N

AI Score

6.8

Confidence

Low

EPSS

0

Percentile

9.0%

SSVC

Exploitation

none

Automatable

no

Technical Impact

partial

Related for VULNRICHMENT:CVE-2024-2461