CVEvulnerability

CVE-2024-28020

8.0 HIGH Published 2024-06-11 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2024-06-11
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
8.0 HIGH — CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H
CVSS 3.1 ([email protected])
8.0 HIGH — CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H
Weaknesses
CWE-286

Description

A user/password reuse vulnerability exists in the FOXMAN-UN/UNEM application and server management. If exploited a malicious high-privileged user could use the passwords and login information through complex routines to extend access on the server and other services.

Affected configurations

• hitachienergy foxman-un r15a • hitachienergy foxman-un r15b • hitachienergy foxman-un r16a • hitachienergy foxman-un r16b • hitachienergy unem r15a • hitachienergy unem r15b • hitachienergy unem r16a • hitachienergy unem r16b

Related

Weakness · CWE (1)

  • CWE-286 Incorrect User Management weakness

References