Hitachi EnergyVULNRICHMENT:CVE-2024-28023CVE-2024-28023
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
LOW
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:L
AI Score
Confidence
High
SSVC
Exploitation
none
Automatable
no
Technical Impact
partial
A vulnerability exists in the message queueing mechanism that if
exploited can lead to the exposure of resources or functionality to
unintended actors, possibly providing attackers with sensitive information or even execute arbitrary code.
CNA Affected
[
{
"vendor": "Hitachi Energy",
"product": "FOXMAN-UN",
"versions": [
{
"status": "affected",
"version": "FOXMAN-UN R16B PC2"
},
{
"status": "unaffected",
"version": "FOXMAN-UN R16B PC3",
"versionType": "custom",
"lessThanOrEqual": "FOXMAN-UN R16B PC4"
},
{
"status": "affected",
"version": "FOXMAN-UN R15B PC4"
},
{
"status": "unaffected",
"version": "FOXMAN-UN R15B PC5"
}
],
"defaultStatus": "unaffected"
},
{
"vendor": "Hitachi Energy",
"product": "UNEM",
"versions": [
{
"status": "affected",
"version": "UNEM R16B PC2"
},
{
"status": "unaffected",
"version": "UNEM R16B PC3",
"versionType": "custom",
"lessThanOrEqual": "UNEM R16B PC4"
},
{
"status": "affected",
"version": "UNEM R15B PC4"
},
{
"status": "unaffected",
"version": "UNEM R15B PC4"
}
],
"defaultStatus": "unaffected"
}
]Related
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
LOW
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:L
AI Score
Confidence
High
SSVC
Exploitation
none
Automatable
no
Technical Impact
partial