Login Request a demo
Medium severity · published Jun 11, 2024
CVE-2024-28023
A vulnerability exists in the message queueing mechanism that if exploited can lead to the exposure of resources or functionality to unintended actors, possibly providing…
5.7
CVSS
0.2%
EPSS
No
On KEV
Description
A vulnerability exists in the message queueing mechanism that if exploited can lead to the exposure of resources or functionality to unintended actors, possibly providing attackers with sensitive information or even execute arbitrary code.
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:L
Attack vector
Local
Complexity
Low
Privileges
High
User interaction
None
Confidentiality
Low
Integrity
Low
Availability
Low
Scope
Changed
Exploitation
Is it being used?
Exploit prediction (EPSS)0.2% · higher than 6% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
FO
FOXMAN-UN · Hitachi Energy
FOXMAN-UN R16B PC2; FOXMAN-UN R15B PC4 · source: vendor
UN
UNEM · Hitachi Energy
UNEM R16B PC2; UNEM R15B PC4 · source: vendor
Affected product
FO
FOXMAN-UN
Hitachi Energy
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2024-28023
CVE.org
https://www.cve.org/CVERecord?id=CVE-2024-28023
publisher.hitachienergy.com
https://publisher.hitachienergy.com/preview?DocumentId=8DBD000201&languageCode=en&Preview=true
More from FOXMAN-UN
10.0
CVE-2024-2013
An authentication bypass vulnerability exists in the FOXMAN-UN/UNEM server / API Gateway component that if exploited allows attackers without any access to interact with the…
9.8
CVE-2024-2011
A heap-based buffer overflow vulnerability exists in the FOXMAN-UN/UNEM that if exploited will generally lead to a denial of service but can be used to execute arbitrary code,…
9.8
CVE-2024-2012
vulnerability exists in the FOXMAN-UN/UNEM server / API Gateway that if exploited an attacker could use to allow unintended commands or code to be executed on the UNEM server…
8.0
CVE-2024-28020
A user/password reuse vulnerability exists in the FOXMAN-UN/UNEM application and server management
7.4
CVE-2024-28021
A vulnerability exists in the FOXMAN-UN/UNEM server that affects the message queueing mechanism’s certificate validation