CVE-2024-28020

{"id": "CVE-2024-28020", "cveTags": [], "metrics": {"cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "CHANGED", "version": "3.1", "baseScore": 9.9, "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "impactScore": 6.0, "exploitabilityScore": 3.1}, {"type": "Secondary", "source": "cybersecurity@hitachienergy.com", "cvssData": {"scope": "CHANGED", "version": "3.1", "baseScore": 8.0, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "HIGH", "availabilityImpact": "HIGH", "privilegesRequired": "HIGH", "confidentialityImpact": "HIGH"}, "impactScore": 6.0, "exploitabilityScore": 1.3}]}, "published": "2024-06-11T19:16:05.787", "references": [{"url": "https://publisher.hitachienergy.com/preview?DocumentId=8DBD000194&languageCode=en&Preview=true", "tags": ["Vendor Advisory"], "source": "cybersecurity@hitachienergy.com"}, {"url": "https://publisher.hitachienergy.com/preview?DocumentId=8DBD000201&languageCode=en&Preview=true", "tags": ["Vendor Advisory"], "source": "cybersecurity@hitachienergy.com"}], "vulnStatus": "Undergoing Analysis", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-noinfo"}]}, {"type": "Secondary", "source": "cybersecurity@hitachienergy.com", "description": [{"lang": "en", "value": "CWE-286"}]}], "descriptions": [{"lang": "en", "value": "A user/password reuse vulnerability exists in the FOXMAN-UN/UNEM\u00a0 application and server management. If exploited a malicious user \ncould use the passwords and login information to extend access on \nthe server and other services."}, {"lang": "es", "value": "Existe una vulnerabilidad de reutilizaci\u00f3n de usuario/contrase\u00f1a en la administraci\u00f3n de aplicaciones y servidores de FOXMAN-UN/UNEM. Si se explota, un usuario malintencionado podr\u00eda utilizar las contrase\u00f1as y la informaci\u00f3n de inicio de sesi\u00f3n para ampliar el acceso al servidor y a otros servicios."}], "lastModified": "2024-08-15T21:32:33.467", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:hitachienergy:foxman_un:r15a:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "DE718EB5-3F54-4CCB-A34E-5BA0DF87EEF0"}, {"criteria": "cpe:2.3:a:hitachienergy:foxman_un:r15b:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "EB17D0E8-A0AD-4B1B-A92B-110521975AE0"}, {"criteria": "cpe:2.3:a:hitachienergy:foxman_un:r16a:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "3ED924CD-4EBF-453E-BC07-40EB415F2585"}, {"criteria": "cpe:2.3:a:hitachienergy:foxman_un:r16b:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "9D92BFBB-239A-4188-A227-67D13C84CA5C"}, {"criteria": "cpe:2.3:a:hitachienergy:unem:r15a:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "E78C9E5B-5876-4F15-A98A-359193287446"}, {"criteria": "cpe:2.3:a:hitachienergy:unem:r15b:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C3168F38-7B9E-4F4D-B6D0-1BAFB5FE05F5"}, {"criteria": "cpe:2.3:a:hitachienergy:unem:r16a:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "7ABB4A53-07A0-4F9A-824B-A1AC71CCB44E"}, {"criteria": "cpe:2.3:a:hitachienergy:unem:r16b:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "ADA6755A-0553-4246-B462-7580B080FDEF"}], "operator": "OR"}]}], "sourceIdentifier": "cybersecurity@hitachienergy.com"}