CVEvulnerability

CVE-2024-2012

9.8 CRITICAL Published 2024-06-11 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2024-06-11
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
9.1 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
CVSS 3.1 ([email protected])
9.8 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weaknesses
CWE-288

Description

vulnerability exists in the FOXMAN-UN/UNEM server / API Gateway that if exploited an attacker could use to allow unintended commands or code to be executed on the UNEM server allowing sensitive data to be read or modified or could cause other unintended behavior

Affected configurations

• hitachienergy foxman-un r15a • hitachienergy foxman-un r15b • hitachienergy foxman-un r16a • hitachienergy foxman-un r16b • hitachienergy unem r15a • hitachienergy unem r15b • hitachienergy unem r16a • hitachienergy unem r16b

Related

Weakness · CWE (1)

  • CWE-288 Authentication Bypass Using an Alternate Path or Channel weakness

References