IM
IronMonkey Threat Research

CVE-2024-28024 MEDIUM

Published: 2024-06-11 | Last Modified: 2024-11-21 | Status: Modified

Description

A vulnerability exists in the FOXMAN-UN/UNEM in which sensitive information is stored in cleartext within a resource that might be accessible to another control sphere.

Additional Descriptions (1)

Existe una vulnerabilidad en FOXMAN-UN/UNEM en la que información confidencial se almacena en texto plano dentro de un recurso que podría ser accesible a otra esfera de control.

CVSS Metrics

Base Score: 4.1 (MEDIUM)

CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:N

Attack VectorLOCAL
Attack ComplexityHIGH
Privileges RequiredHIGH
User InteractionNONE
ScopeUNCHANGED
Confidentiality ImpactHIGH
Integrity ImpactNONE
Availability ImpactNONE

Source: [email protected]

Type: Primary

Exploitability Score: 0.5

Impact Score: 3.6

Weaknesses

Source Type Description
[email protected] Secondary
en CWE-312
[email protected] Primary
en CWE-312

Affected Products

Vendor Product Version Update Type
hitachienergy foxman-un r15a <built-in method update of dict object at 0x72a9ccf28e40> Application
hitachienergy foxman-un r15b <built-in method update of dict object at 0x72a9ccf2b9c0> Application
hitachienergy foxman-un r16a <built-in method update of dict object at 0x72a9ccf28c00> Application
hitachienergy foxman-un r16b <built-in method update of dict object at 0x72a9cdf01d80> Application
hitachienergy unem r15a <built-in method update of dict object at 0x72a9ccf2bbc0> Application
hitachienergy unem r15b <built-in method update of dict object at 0x72a9ccf29dc0> Application
hitachienergy unem r16a <built-in method update of dict object at 0x72a9ccf2a300> Application
hitachienergy unem r16b <built-in method update of dict object at 0x72a9b0ca44c0> Application

Affected Configurations

Operator: OR

Vulnerable CPE
Yes cpe:2.3:a:hitachienergy:foxman-un:r15a:*:*:*:*:*:*:*
Yes cpe:2.3:a:hitachienergy:foxman-un:r15b:*:*:*:*:*:*:*
Yes cpe:2.3:a:hitachienergy:foxman-un:r16a:*:*:*:*:*:*:*
Yes cpe:2.3:a:hitachienergy:foxman-un:r16b:*:*:*:*:*:*:*
Yes cpe:2.3:a:hitachienergy:unem:r15a:*:*:*:*:*:*:*
Yes cpe:2.3:a:hitachienergy:unem:r15b:*:*:*:*:*:*:*
Yes cpe:2.3:a:hitachienergy:unem:r16a:*:*:*:*:*:*:*
Yes cpe:2.3:a:hitachienergy:unem:r16b:*:*:*:*:*:*:*

References

Notification
Message here