CVE-2024-28022
Last modified
CVE-2024-28022 is a medium-severity vulnerability rated 6.5/10 on the CVSS scale. A vulnerability exists in the UNEM server / APIGateway that if exploited allows a malicious user to perform an arbitrary number of authentication attempts using different passwords, and eventually gain access to other components in the same security realm using the targeted account.. EPSS estimates a 0.36% chance of exploitation in the next 30 days.
Description
A vulnerability exists in the UNEM server / APIGateway that if exploited allows a malicious user to perform an arbitrary number of authentication attempts using different passwords, and eventually gain access to other components in the same security realm using the targeted account.
Metrics
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:L
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Hitachienergy | Foxman-Un | r15a |
| Hitachienergy | Foxman-Un | r15b |
| Hitachienergy | Foxman-Un | r16a |
| Hitachienergy | Foxman-Un | r16b |
| Hitachienergy | Unem | r15a |
| Hitachienergy | Unem | r15b |
| Hitachienergy | Unem | r16a |
| Hitachienergy | Unem | r16b |
References
Timeline
- Published
- Last Modified
- Status
- Analyzed
Frequently Asked Questions
What is CVE-2024-28022?
How severe is CVE-2024-28022?
How do I fix CVE-2024-28022?
Are you affected by CVE-2024-28022?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST