CVE-2023-1711 - Vulnerability Details

Vendors	Products
Hitachienergy	Foxman-un Unem

Link	Providers
https://search.abb.com/library/Download.aspx?DocumentID=8DBD000155&LanguageCode=en&DocumentPartId=&Action=Launch
https://search.abb.com/library/Download.aspx?DocumentID=8DBD000166&LanguageCode=en&DocumentPartId=&Action=Launch

Type	Values Removed	Values Added
Metrics		ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}`

Show plain JSON

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2023-1711", "assignerOrgId": "e383dce4-0c27-4495-91c4-0db157728d17", "state": "PUBLISHED", "assignerShortName": "Hitachi Energy", "dateReserved": "2023-03-30T07:56:02.223Z", "datePublished": "2023-05-30T18:46:24.317Z", "dateUpdated": "2025-01-09T21:19:26.511Z"}, "containers": {"cna": {"affected": [{"defaultStatus": "unaffected", "product": "FOXMAN-UN", "vendor": "Hitachi Energy", "versions": [{"status": "affected", "version": "FOXMAN-UN R16A"}, {"status": "affected", "version": "FOXMAN-UN R15B"}, {"status": "affected", "version": "FOXMAN-UN R15A"}, {"status": "affected", "version": "FOXMAN-UN R14B"}, {"status": "affected", "version": "FOXMAN-UN R14A"}, {"status": "affected", "version": "FOXMAN-UN R11B"}, {"status": "affected", "version": "FOXMAN-UN R11A"}, {"status": "affected", "version": "FOXMAN-UN R10C"}, {"status": "affected", "version": "FOXMAN-UN R9C"}]}, {"defaultStatus": "unaffected", "product": "UNEM", "vendor": "Hitachi Energy", "versions": [{"status": "affected", "version": "UNEM R16A"}, {"status": "affected", "version": "UNEM R15B"}, {"status": "affected", "version": "UNEM R15A"}, {"status": "affected", "version": "UNEM R14B"}, {"status": "affected", "version": "UNEM R14A"}, {"status": "affected", "version": "UNEM R11B"}, {"status": "affected", "version": "UNEM R11A"}, {"status": "affected", "version": "UNEM R10C"}, {"status": "affected", "version": "UNEM R9C"}]}], "descriptions": [{"lang": "en", "supportingMedia": [{"base64": false, "type": "text/html", "value": "A vulnerability exists in a FOXMAN-UN and UNEM logging component, it only affects systems that use remote authentication to the network elements. <br>If exploited an attacker could obtain confidential information.<br><br>\n\n<span style=\"background-color: rgb(255, 255, 255);\">List of CPEs:</span><br><ul><li>cpe:2.3:a:hitachienergy:foxman_un:R9C:*:*:*:*:*:*:*</li><li>cpe:2.3:a:hitachienergy:foxman_un:R10C:*:*:*:*:*:*:*<br></li><li>cpe:2.3:a:hitachienergy:foxman_un:R11A:*:*:*:*:*:*:*<br></li><li>cpe:2.3:a:hitachienergy:foxman_un:R11B:*:*:*:*:*:*:*<br></li><li>cpe:2.3:a:hitachienergy:foxman_un:R14A:*:*:*:*:*:*:*<br></li><li>cpe:2.3:a:hitachienergy:foxman_un:R14B:*:*:*:*:*:*:*<br></li><li>cpe:2.3:a:hitachienergy:foxman_un:R15A:*:*:*:*:*:*:*<br></li><li>cpe:2.3:a:hitachienergy:foxman_un:R15B:*:*:*:*:*:*:*<br></li><li>cpe:2.3:a:hitachienergy:foxman_un:R16A:*:*:*:*:*:*:*<br></li><li></li><li>cpe:2.3:a:hitachienergy:unem:R9C:*:*:*:*:*:*:*</li><li>cpe:2.3:a:hitachienergy: unem :R10C:*:*:*:*:*:*:*<br></li><li>cpe:2.3:a:hitachienergy: unem :R11A:*:*:*:*:*:*:*<br></li><li>cpe:2.3:a:hitachienergy: unem :R11B:*:*:*:*:*:*:*<br></li><li>cpe:2.3:a:hitachienergy: unem :R14A:*:*:*:*:*:*:*<br></li><li>cpe:2.3:a:hitachienergy: unem :R14B:*:*:*:*:*:*:*<br></li><li>cpe:2.3:a:hitachienergy: unem :R15A:*:*:*:*:*:*:*<br></li><li>cpe:2.3:a:hitachienergy: unem :R15B:*:*:*:*:*:*:*<br></li><li>cpe:2.3:a:hitachienergy: unem :R16A:*:*:*:*:*:*:*</li></ul>"}], "value": "A vulnerability exists in a FOXMAN-UN and UNEM logging component, it only affects systems that use remote authentication to the network elements. \nIf exploited an attacker could obtain confidential information.\n\n\n\nList of CPEs:\n  *  cpe:2.3:a:hitachienergy:foxman_un:R9C:*:*:*:*:*:*:*\n  *  cpe:2.3:a:hitachienergy:foxman_un:R10C:*:*:*:*:*:*:*\n\n  *  cpe:2.3:a:hitachienergy:foxman_un:R11A:*:*:*:*:*:*:*\n\n  *  cpe:2.3:a:hitachienergy:foxman_un:R11B:*:*:*:*:*:*:*\n\n  *  cpe:2.3:a:hitachienergy:foxman_un:R14A:*:*:*:*:*:*:*\n\n  *  cpe:2.3:a:hitachienergy:foxman_un:R14B:*:*:*:*:*:*:*\n\n  *  cpe:2.3:a:hitachienergy:foxman_un:R15A:*:*:*:*:*:*:*\n\n  *  cpe:2.3:a:hitachienergy:foxman_un:R15B:*:*:*:*:*:*:*\n\n  *  cpe:2.3:a:hitachienergy:foxman_un:R16A:*:*:*:*:*:*:*\n\n  *  \n  *  cpe:2.3:a:hitachienergy:unem:R9C:*:*:*:*:*:*:*\n  *  cpe:2.3:a:hitachienergy: unem :R10C:*:*:*:*:*:*:*\n\n  *  cpe:2.3:a:hitachienergy: unem :R11A:*:*:*:*:*:*:*\n\n  *  cpe:2.3:a:hitachienergy: unem :R11B:*:*:*:*:*:*:*\n\n  *  cpe:2.3:a:hitachienergy: unem :R14A:*:*:*:*:*:*:*\n\n  *  cpe:2.3:a:hitachienergy: unem :R14B:*:*:*:*:*:*:*\n\n  *  cpe:2.3:a:hitachienergy: unem :R15A:*:*:*:*:*:*:*\n\n  *  cpe:2.3:a:hitachienergy: unem :R15B:*:*:*:*:*:*:*\n\n  *  cpe:2.3:a:hitachienergy: unem :R16A:*:*:*:*:*:*:*\n\n\n"}], "metrics": [{"cvssV3_1": {"attackComplexity": "HIGH", "attackVector": "LOCAL", "availabilityImpact": "NONE", "baseScore": 4, "baseSeverity": "MEDIUM", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:U/C:H/I:N/A:N", "version": "3.1"}, "format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "problemTypes": [{"descriptions": [{"cweId": "CWE-117", "description": "CWE-117", "lang": "en", "type": "CWE"}]}], "providerMetadata": {"orgId": "e383dce4-0c27-4495-91c4-0db157728d17", "shortName": "Hitachi Energy", "dateUpdated": "2023-05-30T18:46:29.787Z"}, "references": [{"url": "https://search.abb.com/library/Download.aspx?DocumentID=8DBD000155&LanguageCode=en&DocumentPartId=&Action=Launch"}, {"url": "https://search.abb.com/library/Download.aspx?DocumentID=8DBD000166&LanguageCode=en&DocumentPartId=&Action=Launch"}], "solutions": [{"lang": "en", "supportingMedia": [{"base64": false, "type": "text/html", "value": "The vulnerability is remediated in FOXMAN-UN/UNEM R16B.<br>Please upgrade to R16B when released or apply general mitigation factors.<br><br>"}], "value": "The vulnerability is remediated in FOXMAN-UN/UNEM R16B.\nPlease upgrade to R16B when released or apply general mitigation factors.\n\n"}], "source": {"discovery": "UNKNOWN"}, "workarounds": [{"lang": "en", "supportingMedia": [{"base64": false, "type": "text/html", "value": "\n\nApply mitigation as described in the cybersecurity advisory Mitigation Factors/Workarounds Section.\n\n<br>"}], "value": "\nApply mitigation as described in the cybersecurity advisory Mitigation Factors/Workarounds Section.\n\n\n"}], "x_generator": {"engine": "Vulnogram 0.1.0-dev"}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-02T05:57:25.264Z"}, "title": "CVE Program Container", "references": [{"url": "https://search.abb.com/library/Download.aspx?DocumentID=8DBD000155&LanguageCode=en&DocumentPartId=&Action=Launch", "tags": ["x_transferred"]}, {"url": "https://search.abb.com/library/Download.aspx?DocumentID=8DBD000166&LanguageCode=en&DocumentPartId=&Action=Launch", "tags": ["x_transferred"]}]}, {"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2025-01-09T21:19:08.886899Z", "id": "CVE-2023-1711", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-01-09T21:19:26.511Z"}}]}}

{

dataType : CVE_RECORD (string)

dataVersion : 5.1 (string)

cveMetadata : { »

cveId : CVE-2023-1711 (string)

assignerOrgId : e383dce4-0c27-4495-91c4-0db157728d17 (string)

state : PUBLISHED (string)

assignerShortName : Hitachi Energy (string)

dateReserved : 2023-03-30T07:56:02.223Z (string)

datePublished : 2023-05-30T18:46:24.317Z (string)

dateUpdated : 2025-01-09T21:19:26.511Z (string)

}

containers : { »

cna : { »

affected : [ »

0 : { »

defaultStatus : unaffected (string)

product : FOXMAN-UN (string)

vendor : Hitachi Energy (string)

versions : [ »

0 : { »

status : affected (string)

version : FOXMAN-UN R16A (string)

}

1 : { »

status : affected (string)

version : FOXMAN-UN R15B (string)

}

2 : { »

status : affected (string)

version : FOXMAN-UN R15A (string)

}

3 : { »

status : affected (string)

version : FOXMAN-UN R14B (string)

}

4 : { »

status : affected (string)

version : FOXMAN-UN R14A (string)

}

5 : { »

status : affected (string)

version : FOXMAN-UN R11B (string)

}

6 : { »

status : affected (string)

version : FOXMAN-UN R11A (string)

}

7 : { »

status : affected (string)

version : FOXMAN-UN R10C (string)

}

8 : { »

status : affected (string)

version : FOXMAN-UN R9C (string)

}

]

}

1 : { »

defaultStatus : unaffected (string)

product : UNEM (string)

vendor : Hitachi Energy (string)

versions : [ »

0 : { »

status : affected (string)

version : UNEM R16A (string)

}

1 : { »

status : affected (string)

version : UNEM R15B (string)

}

2 : { »

status : affected (string)

version : UNEM R15A (string)

}

3 : { »

status : affected (string)

version : UNEM R14B (string)

}

4 : { »

status : affected (string)

version : UNEM R14A (string)

}

5 : { »

status : affected (string)

version : UNEM R11B (string)

}

6 : { »

status : affected (string)

version : UNEM R11A (string)

}

7 : { »

status : affected (string)

version : UNEM R10C (string)

}

8 : { »

status : affected (string)

version : UNEM R9C (string)

}

]

}

]

descriptions : [ »

0 : { »

lang : en (string)

supportingMedia : [ »

0 : { »

base64 : false (boolean)

type : text/html (string)

value : A vulnerability exists in a FOXMAN-UN and UNEM logging component, it only affects systems that use remote authentication to the network elements. If exploited an attacker could obtain confidential information. List of CPEs: <ul><li>cpe:2.3:a:hitachienergy:foxman_un:R9C:*:*:*:*:*:*:*</li><li>cpe:2.3:a:hitachienergy:foxman_un:R10C:*:*:*:*:*:*:* </li><li>cpe:2.3:a:hitachienergy:foxman_un:R11A:*:*:*:*:*:*:* </li><li>cpe:2.3:a:hitachienergy:foxman_un:R11B:*:*:*:*:*:*:* </li><li>cpe:2.3:a:hitachienergy:foxman_un:R14A:*:*:*:*:*:*:* </li><li>cpe:2.3:a:hitachienergy:foxman_un:R14B:*:*:*:*:*:*:* </li><li>cpe:2.3:a:hitachienergy:foxman_un:R15A:*:*:*:*:*:*:* </li><li>cpe:2.3:a:hitachienergy:foxman_un:R15B:*:*:*:*:*:*:* </li><li>cpe:2.3:a:hitachienergy:foxman_un:R16A:*:*:*:*:*:*:* </li><li></li><li>cpe:2.3:a:hitachienergy:unem:R9C:*:*:*:*:*:*:*</li><li>cpe:2.3:a:hitachienergy: unem :R10C:*:*:*:*:*:*:* </li><li>cpe:2.3:a:hitachienergy: unem :R11A:*:*:*:*:*:*:* </li><li>cpe:2.3:a:hitachienergy: unem :R11B:*:*:*:*:*:*:* </li><li>cpe:2.3:a:hitachienergy: unem :R14A:*:*:*:*:*:*:* </li><li>cpe:2.3:a:hitachienergy: unem :R14B:*:*:*:*:*:*:* </li><li>cpe:2.3:a:hitachienergy: unem :R15A:*:*:*:*:*:*:* </li><li>cpe:2.3:a:hitachienergy: unem :R15B:*:*:*:*:*:*:* </li><li>cpe:2.3:a:hitachienergy: unem :R16A:*:*:*:*:*:*:*</li></ul> (string)

}

]

value : A vulnerability exists in a FOXMAN-UN and UNEM logging component, it only affects systems that use remote authentication to the network elements. If exploited an attacker could obtain confidential information. List of CPEs: * cpe:2.3:a:hitachienergy:foxman_un:R9C:*:*:*:*:*:*:* * cpe:2.3:a:hitachienergy:foxman_un:R10C:*:*:*:*:*:*:* * cpe:2.3:a:hitachienergy:foxman_un:R11A:*:*:*:*:*:*:* * cpe:2.3:a:hitachienergy:foxman_un:R11B:*:*:*:*:*:*:* * cpe:2.3:a:hitachienergy:foxman_un:R14A:*:*:*:*:*:*:* * cpe:2.3:a:hitachienergy:foxman_un:R14B:*:*:*:*:*:*:* * cpe:2.3:a:hitachienergy:foxman_un:R15A:*:*:*:*:*:*:* * cpe:2.3:a:hitachienergy:foxman_un:R15B:*:*:*:*:*:*:* * cpe:2.3:a:hitachienergy:foxman_un:R16A:*:*:*:*:*:*:* * * cpe:2.3:a:hitachienergy:unem:R9C:*:*:*:*:*:*:* * cpe:2.3:a:hitachienergy: unem :R10C:*:*:*:*:*:*:* * cpe:2.3:a:hitachienergy: unem :R11A:*:*:*:*:*:*:* * cpe:2.3:a:hitachienergy: unem :R11B:*:*:*:*:*:*:* * cpe:2.3:a:hitachienergy: unem :R14A:*:*:*:*:*:*:* * cpe:2.3:a:hitachienergy: unem :R14B:*:*:*:*:*:*:* * cpe:2.3:a:hitachienergy: unem :R15A:*:*:*:*:*:*:* * cpe:2.3:a:hitachienergy: unem :R15B:*:*:*:*:*:*:* * cpe:2.3:a:hitachienergy: unem :R16A:*:*:*:*:*:*:* (string)

}

]

metrics : [ »

0 : { »

cvssV3_1 : { »

attackComplexity : HIGH (string)

attackVector : LOCAL (string)

availabilityImpact : NONE (string)

baseScore : 4 (number)

baseSeverity : MEDIUM (string)

confidentialityImpact : HIGH (string)

integrityImpact : NONE (string)

privilegesRequired : HIGH (string)

scope : UNCHANGED (string)

userInteraction : REQUIRED (string)

vectorString : CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:U/C:H/I:N/A:N (string)

version : 3.1 (string)

}

format : CVSS (string)

scenarios : [ »

0 : { »

lang : en (string)

value : GENERAL (string)

}

]

}

]

problemTypes : [ »

0 : { »

descriptions : [ »

0 : { »

cweId : CWE-117 (string)

description : CWE-117 (string)

lang : en (string)

type : CWE (string)

}

]

}

]

providerMetadata : { »

orgId : e383dce4-0c27-4495-91c4-0db157728d17 (string)

shortName : Hitachi Energy (string)

dateUpdated : 2023-05-30T18:46:29.787Z (string)

}

references : [ »

0 : { »

url : https://search.abb.com/library/Download.aspx?DocumentID=8DBD000155&LanguageCode=en&DocumentPartId=&Action=Launch (string)

}

1 : { »

url : https://search.abb.com/library/Download.aspx?DocumentID=8DBD000166&LanguageCode=en&DocumentPartId=&Action=Launch (string)

}

]

solutions : [ »

0 : { »

lang : en (string)

supportingMedia : [ »

0 : { »

base64 : false (boolean)

type : text/html (string)

value : The vulnerability is remediated in FOXMAN-UN/UNEM R16B. Please upgrade to R16B when released or apply general mitigation factors. (string)

}

]

value : The vulnerability is remediated in FOXMAN-UN/UNEM R16B. Please upgrade to R16B when released or apply general mitigation factors. (string)

}

]

source : { »

discovery : UNKNOWN (string)

}

workarounds : [ »

0 : { »

lang : en (string)

supportingMedia : [ »

0 : { »

base64 : false (boolean)

type : text/html (string)

value : Apply mitigation as described in the cybersecurity advisory Mitigation Factors/Workarounds Section. (string)

}

]

value : Apply mitigation as described in the cybersecurity advisory Mitigation Factors/Workarounds Section. (string)

}

]

x_generator : { »

engine : Vulnogram 0.1.0-dev (string)

}

adp : [ »

0 : { »

providerMetadata : { »

orgId : af854a3a-2127-422b-91ae-364da2661108 (string)

shortName : CVE (string)

dateUpdated : 2024-08-02T05:57:25.264Z (string)

}

title : CVE Program Container (string)

references : [ »

0 : { »

url : https://search.abb.com/library/Download.aspx?DocumentID=8DBD000155&LanguageCode=en&DocumentPartId=&Action=Launch (string)

tags : [ »

0 : x_transferred (string)

]

}

1 : { »

url : https://search.abb.com/library/Download.aspx?DocumentID=8DBD000166&LanguageCode=en&DocumentPartId=&Action=Launch (string)

tags : [ »

0 : x_transferred (string)

]

}

]

}

1 : { »

metrics : [ »

0 : { »

other : { »

type : ssvc (string)

content : { »

timestamp : 2025-01-09T21:19:08.886899Z (string)

id : CVE-2023-1711 (string)

options : [ »

0 : { »

Exploitation : none (string)

}

1 : { »

Automatable : no (string)

}

2 : { »

Technical Impact : partial (string)

}

]

role : CISA Coordinator (string)

version : 2.0.3 (string)

}

]

title : CISA ADP Vulnrichment (string)

providerMetadata : { »

orgId : 134c704f-9b21-4f2e-91b3-4a467353bcc0 (string)

shortName : CISA-ADP (string)

dateUpdated : 2025-01-09T21:19:26.511Z (string)

}

]

}

Show plain JSON

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CVE Program Container", "references": [{"url": "https://search.abb.com/library/Download.aspx?DocumentID=8DBD000155&LanguageCode=en&DocumentPartId=&Action=Launch", "tags": ["x_transferred"]}, {"url": "https://search.abb.com/library/Download.aspx?DocumentID=8DBD000166&LanguageCode=en&DocumentPartId=&Action=Launch", "tags": ["x_transferred"]}], "providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-02T05:57:25.264Z"}}, {"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2023-1711", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2025-01-09T21:19:08.886899Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-01-09T21:19:22.787Z"}}], "cna": {"source": {"discovery": "UNKNOWN"}, "metrics": [{"format": "CVSS", "cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 4, "attackVector": "LOCAL", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:U/C:H/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "REQUIRED", "attackComplexity": "HIGH", "availabilityImpact": "NONE", "privilegesRequired": "HIGH", "confidentialityImpact": "HIGH"}, "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "affected": [{"vendor": "Hitachi Energy", "product": "FOXMAN-UN", "versions": [{"status": "affected", "version": "FOXMAN-UN R16A"}, {"status": "affected", "version": "FOXMAN-UN R15B"}, {"status": "affected", "version": "FOXMAN-UN R15A"}, {"status": "affected", "version": "FOXMAN-UN R14B"}, {"status": "affected", "version": "FOXMAN-UN R14A"}, {"status": "affected", "version": "FOXMAN-UN R11B"}, {"status": "affected", "version": "FOXMAN-UN R11A"}, {"status": "affected", "version": "FOXMAN-UN R10C"}, {"status": "affected", "version": "FOXMAN-UN R9C"}], "defaultStatus": "unaffected"}, {"vendor": "Hitachi Energy", "product": "UNEM", "versions": [{"status": "affected", "version": "UNEM R16A"}, {"status": "affected", "version": "UNEM R15B"}, {"status": "affected", "version": "UNEM R15A"}, {"status": "affected", "version": "UNEM R14B"}, {"status": "affected", "version": "UNEM R14A"}, {"status": "affected", "version": "UNEM R11B"}, {"status": "affected", "version": "UNEM R11A"}, {"status": "affected", "version": "UNEM R10C"}, {"status": "affected", "version": "UNEM R9C"}], "defaultStatus": "unaffected"}], "solutions": [{"lang": "en", "value": "The vulnerability is remediated in FOXMAN-UN/UNEM R16B.\nPlease upgrade to R16B when released or apply general mitigation factors.\n\n", "supportingMedia": [{"type": "text/html", "value": "The vulnerability is remediated in FOXMAN-UN/UNEM R16B.<br>Please upgrade to R16B when released or apply general mitigation factors.<br><br>", "base64": false}]}], "references": [{"url": "https://search.abb.com/library/Download.aspx?DocumentID=8DBD000155&LanguageCode=en&DocumentPartId=&Action=Launch"}, {"url": "https://search.abb.com/library/Download.aspx?DocumentID=8DBD000166&LanguageCode=en&DocumentPartId=&Action=Launch"}], "workarounds": [{"lang": "en", "value": "\nApply mitigation as described in the cybersecurity advisory Mitigation Factors/Workarounds Section.\n\n\n", "supportingMedia": [{"type": "text/html", "value": "\n\nApply mitigation as described in the cybersecurity advisory Mitigation Factors/Workarounds Section.\n\n<br>", "base64": false}]}], "x_generator": {"engine": "Vulnogram 0.1.0-dev"}, "descriptions": [{"lang": "en", "value": "A vulnerability exists in a FOXMAN-UN and UNEM logging component, it only affects systems that use remote authentication to the network elements. \nIf exploited an attacker could obtain confidential information.\n\n\n\nList of CPEs:\n  *  cpe:2.3:a:hitachienergy:foxman_un:R9C:*:*:*:*:*:*:*\n  *  cpe:2.3:a:hitachienergy:foxman_un:R10C:*:*:*:*:*:*:*\n\n  *  cpe:2.3:a:hitachienergy:foxman_un:R11A:*:*:*:*:*:*:*\n\n  *  cpe:2.3:a:hitachienergy:foxman_un:R11B:*:*:*:*:*:*:*\n\n  *  cpe:2.3:a:hitachienergy:foxman_un:R14A:*:*:*:*:*:*:*\n\n  *  cpe:2.3:a:hitachienergy:foxman_un:R14B:*:*:*:*:*:*:*\n\n  *  cpe:2.3:a:hitachienergy:foxman_un:R15A:*:*:*:*:*:*:*\n\n  *  cpe:2.3:a:hitachienergy:foxman_un:R15B:*:*:*:*:*:*:*\n\n  *  cpe:2.3:a:hitachienergy:foxman_un:R16A:*:*:*:*:*:*:*\n\n  *  \n  *  cpe:2.3:a:hitachienergy:unem:R9C:*:*:*:*:*:*:*\n  *  cpe:2.3:a:hitachienergy: unem :R10C:*:*:*:*:*:*:*\n\n  *  cpe:2.3:a:hitachienergy: unem :R11A:*:*:*:*:*:*:*\n\n  *  cpe:2.3:a:hitachienergy: unem :R11B:*:*:*:*:*:*:*\n\n  *  cpe:2.3:a:hitachienergy: unem :R14A:*:*:*:*:*:*:*\n\n  *  cpe:2.3:a:hitachienergy: unem :R14B:*:*:*:*:*:*:*\n\n  *  cpe:2.3:a:hitachienergy: unem :R15A:*:*:*:*:*:*:*\n\n  *  cpe:2.3:a:hitachienergy: unem :R15B:*:*:*:*:*:*:*\n\n  *  cpe:2.3:a:hitachienergy: unem :R16A:*:*:*:*:*:*:*\n\n\n", "supportingMedia": [{"type": "text/html", "value": "A vulnerability exists in a FOXMAN-UN and UNEM logging component, it only affects systems that use remote authentication to the network elements. <br>If exploited an attacker could obtain confidential information.<br><br>\n\n<span style=\"background-color: rgb(255, 255, 255);\">List of CPEs:</span><br><ul><li>cpe:2.3:a:hitachienergy:foxman_un:R9C:*:*:*:*:*:*:*</li><li>cpe:2.3:a:hitachienergy:foxman_un:R10C:*:*:*:*:*:*:*<br></li><li>cpe:2.3:a:hitachienergy:foxman_un:R11A:*:*:*:*:*:*:*<br></li><li>cpe:2.3:a:hitachienergy:foxman_un:R11B:*:*:*:*:*:*:*<br></li><li>cpe:2.3:a:hitachienergy:foxman_un:R14A:*:*:*:*:*:*:*<br></li><li>cpe:2.3:a:hitachienergy:foxman_un:R14B:*:*:*:*:*:*:*<br></li><li>cpe:2.3:a:hitachienergy:foxman_un:R15A:*:*:*:*:*:*:*<br></li><li>cpe:2.3:a:hitachienergy:foxman_un:R15B:*:*:*:*:*:*:*<br></li><li>cpe:2.3:a:hitachienergy:foxman_un:R16A:*:*:*:*:*:*:*<br></li><li></li><li>cpe:2.3:a:hitachienergy:unem:R9C:*:*:*:*:*:*:*</li><li>cpe:2.3:a:hitachienergy: unem :R10C:*:*:*:*:*:*:*<br></li><li>cpe:2.3:a:hitachienergy: unem :R11A:*:*:*:*:*:*:*<br></li><li>cpe:2.3:a:hitachienergy: unem :R11B:*:*:*:*:*:*:*<br></li><li>cpe:2.3:a:hitachienergy: unem :R14A:*:*:*:*:*:*:*<br></li><li>cpe:2.3:a:hitachienergy: unem :R14B:*:*:*:*:*:*:*<br></li><li>cpe:2.3:a:hitachienergy: unem :R15A:*:*:*:*:*:*:*<br></li><li>cpe:2.3:a:hitachienergy: unem :R15B:*:*:*:*:*:*:*<br></li><li>cpe:2.3:a:hitachienergy: unem :R16A:*:*:*:*:*:*:*</li></ul>", "base64": false}]}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-117", "description": "CWE-117"}]}], "providerMetadata": {"orgId": "e383dce4-0c27-4495-91c4-0db157728d17", "shortName": "Hitachi Energy", "dateUpdated": "2023-05-30T18:46:29.787Z"}}}, "cveMetadata": {"cveId": "CVE-2023-1711", "state": "PUBLISHED", "dateUpdated": "2025-01-09T21:19:26.511Z", "dateReserved": "2023-03-30T07:56:02.223Z", "assignerOrgId": "e383dce4-0c27-4495-91c4-0db157728d17", "datePublished": "2023-05-30T18:46:24.317Z", "assignerShortName": "Hitachi Energy"}, "dataVersion": "5.1"}

{

dataType : CVE_RECORD (string)

containers : { »

adp : [ »

0 : { »

title : CVE Program Container (string)

references : [ »

0 : { »

url : https://search.abb.com/library/Download.aspx?DocumentID=8DBD000155&LanguageCode=en&DocumentPartId=&Action=Launch (string)

tags : [ »

0 : x_transferred (string)

]

}

1 : { »

url : https://search.abb.com/library/Download.aspx?DocumentID=8DBD000166&LanguageCode=en&DocumentPartId=&Action=Launch (string)

tags : [ »

0 : x_transferred (string)

]

}

]

providerMetadata : { »

orgId : af854a3a-2127-422b-91ae-364da2661108 (string)

shortName : CVE (string)

dateUpdated : 2024-08-02T05:57:25.264Z (string)

}

1 : { »

title : CISA ADP Vulnrichment (string)

metrics : [ »

0 : { »

other : { »

type : ssvc (string)

content : { »

id : CVE-2023-1711 (string)

role : CISA Coordinator (string)

options : [ »

0 : { »

Exploitation : none (string)

}

1 : { »

Automatable : no (string)

}

2 : { »

Technical Impact : partial (string)

}

]

version : 2.0.3 (string)

timestamp : 2025-01-09T21:19:08.886899Z (string)

}

]

providerMetadata : { »

orgId : 134c704f-9b21-4f2e-91b3-4a467353bcc0 (string)

shortName : CISA-ADP (string)

dateUpdated : 2025-01-09T21:19:22.787Z (string)

}

]

cna : { »

source : { »

discovery : UNKNOWN (string)

}

metrics : [ »

0 : { »

format : CVSS (string)

cvssV3_1 : { »

scope : UNCHANGED (string)

version : 3.1 (string)

baseScore : 4 (number)

attackVector : LOCAL (string)

baseSeverity : MEDIUM (string)

vectorString : CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:U/C:H/I:N/A:N (string)

integrityImpact : NONE (string)

userInteraction : REQUIRED (string)

attackComplexity : HIGH (string)

availabilityImpact : NONE (string)

privilegesRequired : HIGH (string)

confidentialityImpact : HIGH (string)

}

scenarios : [ »

0 : { »

lang : en (string)

value : GENERAL (string)

}

]

}

]

affected : [ »

0 : { »

vendor : Hitachi Energy (string)

product : FOXMAN-UN (string)

versions : [ »

0 : { »

status : affected (string)

version : FOXMAN-UN R16A (string)

}

1 : { »

status : affected (string)

version : FOXMAN-UN R15B (string)

}

2 : { »

status : affected (string)

version : FOXMAN-UN R15A (string)

}

3 : { »

status : affected (string)

version : FOXMAN-UN R14B (string)

}

4 : { »

status : affected (string)

version : FOXMAN-UN R14A (string)

}

5 : { »

status : affected (string)

version : FOXMAN-UN R11B (string)

}

6 : { »

status : affected (string)

version : FOXMAN-UN R11A (string)

}

7 : { »

status : affected (string)

version : FOXMAN-UN R10C (string)

}

8 : { »

status : affected (string)

version : FOXMAN-UN R9C (string)

}

]

defaultStatus : unaffected (string)

}

1 : { »

vendor : Hitachi Energy (string)

product : UNEM (string)

versions : [ »

0 : { »

status : affected (string)

version : UNEM R16A (string)

}

1 : { »

status : affected (string)

version : UNEM R15B (string)

}

2 : { »

status : affected (string)

version : UNEM R15A (string)

}

3 : { »

status : affected (string)

version : UNEM R14B (string)

}

4 : { »

status : affected (string)

version : UNEM R14A (string)

}

5 : { »

status : affected (string)

version : UNEM R11B (string)

}

6 : { »

status : affected (string)

version : UNEM R11A (string)

}

7 : { »

status : affected (string)

version : UNEM R10C (string)

}

8 : { »

status : affected (string)

version : UNEM R9C (string)

}

]

defaultStatus : unaffected (string)

}

]

solutions : [ »

0 : { »

lang : en (string)

value : The vulnerability is remediated in FOXMAN-UN/UNEM R16B. Please upgrade to R16B when released or apply general mitigation factors. (string)

supportingMedia : [ »

0 : { »

type : text/html (string)

value : The vulnerability is remediated in FOXMAN-UN/UNEM R16B. Please upgrade to R16B when released or apply general mitigation factors. (string)

base64 : false (boolean)

}

]

}

]

references : [ »

0 : { »

url : https://search.abb.com/library/Download.aspx?DocumentID=8DBD000155&LanguageCode=en&DocumentPartId=&Action=Launch (string)

}

1 : { »

url : https://search.abb.com/library/Download.aspx?DocumentID=8DBD000166&LanguageCode=en&DocumentPartId=&Action=Launch (string)

}

]

workarounds : [ »

0 : { »

lang : en (string)

value : Apply mitigation as described in the cybersecurity advisory Mitigation Factors/Workarounds Section. (string)

supportingMedia : [ »

0 : { »

type : text/html (string)

value : Apply mitigation as described in the cybersecurity advisory Mitigation Factors/Workarounds Section. (string)

base64 : false (boolean)

}

]

}

]

x_generator : { »

engine : Vulnogram 0.1.0-dev (string)

}

descriptions : [ »

0 : { »

lang : en (string)

value : A vulnerability exists in a FOXMAN-UN and UNEM logging component, it only affects systems that use remote authentication to the network elements. If exploited an attacker could obtain confidential information. List of CPEs: * cpe:2.3:a:hitachienergy:foxman_un:R9C:*:*:*:*:*:*:* * cpe:2.3:a:hitachienergy:foxman_un:R10C:*:*:*:*:*:*:* * cpe:2.3:a:hitachienergy:foxman_un:R11A:*:*:*:*:*:*:* * cpe:2.3:a:hitachienergy:foxman_un:R11B:*:*:*:*:*:*:* * cpe:2.3:a:hitachienergy:foxman_un:R14A:*:*:*:*:*:*:* * cpe:2.3:a:hitachienergy:foxman_un:R14B:*:*:*:*:*:*:* * cpe:2.3:a:hitachienergy:foxman_un:R15A:*:*:*:*:*:*:* * cpe:2.3:a:hitachienergy:foxman_un:R15B:*:*:*:*:*:*:* * cpe:2.3:a:hitachienergy:foxman_un:R16A:*:*:*:*:*:*:* * * cpe:2.3:a:hitachienergy:unem:R9C:*:*:*:*:*:*:* * cpe:2.3:a:hitachienergy: unem :R10C:*:*:*:*:*:*:* * cpe:2.3:a:hitachienergy: unem :R11A:*:*:*:*:*:*:* * cpe:2.3:a:hitachienergy: unem :R11B:*:*:*:*:*:*:* * cpe:2.3:a:hitachienergy: unem :R14A:*:*:*:*:*:*:* * cpe:2.3:a:hitachienergy: unem :R14B:*:*:*:*:*:*:* * cpe:2.3:a:hitachienergy: unem :R15A:*:*:*:*:*:*:* * cpe:2.3:a:hitachienergy: unem :R15B:*:*:*:*:*:*:* * cpe:2.3:a:hitachienergy: unem :R16A:*:*:*:*:*:*:* (string)

supportingMedia : [ »

0 : { »

type : text/html (string)

value : A vulnerability exists in a FOXMAN-UN and UNEM logging component, it only affects systems that use remote authentication to the network elements. If exploited an attacker could obtain confidential information. List of CPEs: <ul><li>cpe:2.3:a:hitachienergy:foxman_un:R9C:*:*:*:*:*:*:*</li><li>cpe:2.3:a:hitachienergy:foxman_un:R10C:*:*:*:*:*:*:* </li><li>cpe:2.3:a:hitachienergy:foxman_un:R11A:*:*:*:*:*:*:* </li><li>cpe:2.3:a:hitachienergy:foxman_un:R11B:*:*:*:*:*:*:* </li><li>cpe:2.3:a:hitachienergy:foxman_un:R14A:*:*:*:*:*:*:* </li><li>cpe:2.3:a:hitachienergy:foxman_un:R14B:*:*:*:*:*:*:* </li><li>cpe:2.3:a:hitachienergy:foxman_un:R15A:*:*:*:*:*:*:* </li><li>cpe:2.3:a:hitachienergy:foxman_un:R15B:*:*:*:*:*:*:* </li><li>cpe:2.3:a:hitachienergy:foxman_un:R16A:*:*:*:*:*:*:* </li><li></li><li>cpe:2.3:a:hitachienergy:unem:R9C:*:*:*:*:*:*:*</li><li>cpe:2.3:a:hitachienergy: unem :R10C:*:*:*:*:*:*:* </li><li>cpe:2.3:a:hitachienergy: unem :R11A:*:*:*:*:*:*:* </li><li>cpe:2.3:a:hitachienergy: unem :R11B:*:*:*:*:*:*:* </li><li>cpe:2.3:a:hitachienergy: unem :R14A:*:*:*:*:*:*:* </li><li>cpe:2.3:a:hitachienergy: unem :R14B:*:*:*:*:*:*:* </li><li>cpe:2.3:a:hitachienergy: unem :R15A:*:*:*:*:*:*:* </li><li>cpe:2.3:a:hitachienergy: unem :R15B:*:*:*:*:*:*:* </li><li>cpe:2.3:a:hitachienergy: unem :R16A:*:*:*:*:*:*:*</li></ul> (string)

base64 : false (boolean)

}

]

}

]

problemTypes : [ »

0 : { »

descriptions : [ »

0 : { »

lang : en (string)

type : CWE (string)

cweId : CWE-117 (string)

description : CWE-117 (string)

}

]

}

]

providerMetadata : { »

orgId : e383dce4-0c27-4495-91c4-0db157728d17 (string)

shortName : Hitachi Energy (string)

dateUpdated : 2023-05-30T18:46:29.787Z (string)

}

cveMetadata : { »

cveId : CVE-2023-1711 (string)

state : PUBLISHED (string)

dateUpdated : 2025-01-09T21:19:26.511Z (string)

dateReserved : 2023-03-30T07:56:02.223Z (string)

assignerOrgId : e383dce4-0c27-4495-91c4-0db157728d17 (string)

datePublished : 2023-05-30T18:46:24.317Z (string)

assignerShortName : Hitachi Energy (string)

}

dataVersion : 5.1 (string)

}

Show plain JSON

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:hitachienergy:foxman-un:r9c:*:*:*:*:*:*:*", "matchCriteriaId": "CF6EBF5E-662C-4B47-A683-05EBA284A1EA", "vulnerable": true}, {"criteria": "cpe:2.3:a:hitachienergy:foxman-un:r10c:*:*:*:*:*:*:*", "matchCriteriaId": "900AF3F4-5C0B-48B9-91ED-5AABC42C0387", "vulnerable": true}, {"criteria": "cpe:2.3:a:hitachienergy:foxman-un:r11a:*:*:*:*:*:*:*", "matchCriteriaId": "9CD89F83-BB89-45D4-BD95-7E9622C60948", "vulnerable": true}, {"criteria": "cpe:2.3:a:hitachienergy:foxman-un:r11b:*:*:*:*:*:*:*", "matchCriteriaId": "33C7B43C-BC45-4151-BB30-9FBE9E737BE0", "vulnerable": true}, {"criteria": "cpe:2.3:a:hitachienergy:foxman-un:r14a:*:*:*:*:*:*:*", "matchCriteriaId": "F1338D86-A03D-4604-A6E5-31244F18D919", "vulnerable": true}, {"criteria": "cpe:2.3:a:hitachienergy:foxman-un:r14b:*:*:*:*:*:*:*", "matchCriteriaId": "B93B58ED-E004-4B52-A691-C771B34DD9C8", "vulnerable": true}, {"criteria": "cpe:2.3:a:hitachienergy:foxman-un:r15a:*:*:*:*:*:*:*", "matchCriteriaId": "A7593C74-2882-45D3-AB32-3A45E3AECAAE", "vulnerable": true}, {"criteria": "cpe:2.3:a:hitachienergy:foxman-un:r15b:*:*:*:*:*:*:*", "matchCriteriaId": "47606044-296D-4561-B9DC-82659BC666F2", "vulnerable": true}, {"criteria": "cpe:2.3:a:hitachienergy:foxman-un:r16a:*:*:*:*:*:*:*", "matchCriteriaId": "7EE987B2-0620-44BB-AEA7-4E20CBE44822", "vulnerable": true}, {"criteria": "cpe:2.3:a:hitachienergy:unem:r9c:*:*:*:*:*:*:*", "matchCriteriaId": "8FB66BE3-1031-4315-AF85-309BE3C35D7D", "vulnerable": true}, {"criteria": "cpe:2.3:a:hitachienergy:unem:r10c:*:*:*:*:*:*:*", "matchCriteriaId": "F6DF9081-1544-4A69-9D9E-80759289056B", "vulnerable": true}, {"criteria": "cpe:2.3:a:hitachienergy:unem:r11a:*:*:*:*:*:*:*", "matchCriteriaId": "C50E14E9-D2BF-4B6C-BF87-C9E4233D3AD0", "vulnerable": true}, {"criteria": "cpe:2.3:a:hitachienergy:unem:r11b:*:*:*:*:*:*:*", "matchCriteriaId": "996564C6-8B44-4E89-A353-79B711A3DBBA", "vulnerable": true}, {"criteria": "cpe:2.3:a:hitachienergy:unem:r14a:*:*:*:*:*:*:*", "matchCriteriaId": "6AB8CF64-17F7-488D-9763-A1487ECA405D", "vulnerable": true}, {"criteria": "cpe:2.3:a:hitachienergy:unem:r14b:*:*:*:*:*:*:*", "matchCriteriaId": "6E96D583-2EBB-4AB2-A473-A0930E3B8D02", "vulnerable": true}, {"criteria": "cpe:2.3:a:hitachienergy:unem:r15a:*:*:*:*:*:*:*", "matchCriteriaId": "E78C9E5B-5876-4F15-A98A-359193287446", "vulnerable": true}, {"criteria": "cpe:2.3:a:hitachienergy:unem:r15b:*:*:*:*:*:*:*", "matchCriteriaId": "C3168F38-7B9E-4F4D-B6D0-1BAFB5FE05F5", "vulnerable": true}, {"criteria": "cpe:2.3:a:hitachienergy:unem:r16a:*:*:*:*:*:*:*", "matchCriteriaId": "7ABB4A53-07A0-4F9A-824B-A1AC71CCB44E", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "descriptions": [{"lang": "en", "value": "A vulnerability exists in a FOXMAN-UN and UNEM logging component, it only affects systems that use remote authentication to the network elements. \nIf exploited an attacker could obtain confidential information.\n\n\n\nList of CPEs:\n  *  cpe:2.3:a:hitachienergy:foxman_un:R9C:*:*:*:*:*:*:*\n  *  cpe:2.3:a:hitachienergy:foxman_un:R10C:*:*:*:*:*:*:*\n\n  *  cpe:2.3:a:hitachienergy:foxman_un:R11A:*:*:*:*:*:*:*\n\n  *  cpe:2.3:a:hitachienergy:foxman_un:R11B:*:*:*:*:*:*:*\n\n  *  cpe:2.3:a:hitachienergy:foxman_un:R14A:*:*:*:*:*:*:*\n\n  *  cpe:2.3:a:hitachienergy:foxman_un:R14B:*:*:*:*:*:*:*\n\n  *  cpe:2.3:a:hitachienergy:foxman_un:R15A:*:*:*:*:*:*:*\n\n  *  cpe:2.3:a:hitachienergy:foxman_un:R15B:*:*:*:*:*:*:*\n\n  *  cpe:2.3:a:hitachienergy:foxman_un:R16A:*:*:*:*:*:*:*\n\n  *  \n  *  cpe:2.3:a:hitachienergy:unem:R9C:*:*:*:*:*:*:*\n  *  cpe:2.3:a:hitachienergy: unem :R10C:*:*:*:*:*:*:*\n\n  *  cpe:2.3:a:hitachienergy: unem :R11A:*:*:*:*:*:*:*\n\n  *  cpe:2.3:a:hitachienergy: unem :R11B:*:*:*:*:*:*:*\n\n  *  cpe:2.3:a:hitachienergy: unem :R14A:*:*:*:*:*:*:*\n\n  *  cpe:2.3:a:hitachienergy: unem :R14B:*:*:*:*:*:*:*\n\n  *  cpe:2.3:a:hitachienergy: unem :R15A:*:*:*:*:*:*:*\n\n  *  cpe:2.3:a:hitachienergy: unem :R15B:*:*:*:*:*:*:*\n\n  *  cpe:2.3:a:hitachienergy: unem :R16A:*:*:*:*:*:*:*\n\n\n"}], "id": "CVE-2023-1711", "lastModified": "2024-11-21T07:39:44.793", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "HIGH", "attackVector": "LOCAL", "availabilityImpact": "NONE", "baseScore": 4.0, "baseSeverity": "MEDIUM", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:U/C:H/I:N/A:N", "version": "3.1"}, "exploitabilityScore": 0.3, "impactScore": 3.6, "source": "cybersecurity@hitachienergy.com", "type": "Secondary"}, {"cvssData": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "NONE", "baseScore": 4.4, "baseSeverity": "MEDIUM", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N", "version": "3.1"}, "exploitabilityScore": 0.8, "impactScore": 3.6, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2023-05-30T19:15:09.753", "references": [{"source": "cybersecurity@hitachienergy.com", "tags": ["Vendor Advisory"], "url": "https://search.abb.com/library/Download.aspx?DocumentID=8DBD000155&LanguageCode=en&DocumentPartId=&Action=Launch"}, {"source": "cybersecurity@hitachienergy.com", "tags": ["Vendor Advisory"], "url": "https://search.abb.com/library/Download.aspx?DocumentID=8DBD000166&LanguageCode=en&DocumentPartId=&Action=Launch"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Vendor Advisory"], "url": "https://search.abb.com/library/Download.aspx?DocumentID=8DBD000155&LanguageCode=en&DocumentPartId=&Action=Launch"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Vendor Advisory"], "url": "https://search.abb.com/library/Download.aspx?DocumentID=8DBD000166&LanguageCode=en&DocumentPartId=&Action=Launch"}], "sourceIdentifier": "cybersecurity@hitachienergy.com", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-117"}], "source": "cybersecurity@hitachienergy.com", "type": "Secondary"}, {"description": [{"lang": "en", "value": "CWE-116"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{

configurations : [ »

0 : { »

nodes : [ »

0 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:a:hitachienergy:foxman-un:r9c:*:*:*:*:*:*:* (string)

matchCriteriaId : CF6EBF5E-662C-4B47-A683-05EBA284A1EA (string)

vulnerable : true (boolean)

}

1 : { »

criteria : cpe:2.3:a:hitachienergy:foxman-un:r10c:*:*:*:*:*:*:* (string)

matchCriteriaId : 900AF3F4-5C0B-48B9-91ED-5AABC42C0387 (string)

vulnerable : true (boolean)

}

2 : { »

criteria : cpe:2.3:a:hitachienergy:foxman-un:r11a:*:*:*:*:*:*:* (string)

matchCriteriaId : 9CD89F83-BB89-45D4-BD95-7E9622C60948 (string)

vulnerable : true (boolean)

}

3 : { »

criteria : cpe:2.3:a:hitachienergy:foxman-un:r11b:*:*:*:*:*:*:* (string)

matchCriteriaId : 33C7B43C-BC45-4151-BB30-9FBE9E737BE0 (string)

vulnerable : true (boolean)

}

4 : { »

criteria : cpe:2.3:a:hitachienergy:foxman-un:r14a:*:*:*:*:*:*:* (string)

matchCriteriaId : F1338D86-A03D-4604-A6E5-31244F18D919 (string)

vulnerable : true (boolean)

}

5 : { »

criteria : cpe:2.3:a:hitachienergy:foxman-un:r14b:*:*:*:*:*:*:* (string)

matchCriteriaId : B93B58ED-E004-4B52-A691-C771B34DD9C8 (string)

vulnerable : true (boolean)

}

6 : { »

criteria : cpe:2.3:a:hitachienergy:foxman-un:r15a:*:*:*:*:*:*:* (string)

matchCriteriaId : A7593C74-2882-45D3-AB32-3A45E3AECAAE (string)

vulnerable : true (boolean)

}

7 : { »

criteria : cpe:2.3:a:hitachienergy:foxman-un:r15b:*:*:*:*:*:*:* (string)

matchCriteriaId : 47606044-296D-4561-B9DC-82659BC666F2 (string)

vulnerable : true (boolean)

}

8 : { »

criteria : cpe:2.3:a:hitachienergy:foxman-un:r16a:*:*:*:*:*:*:* (string)

matchCriteriaId : 7EE987B2-0620-44BB-AEA7-4E20CBE44822 (string)

vulnerable : true (boolean)

}

9 : { »

criteria : cpe:2.3:a:hitachienergy:unem:r9c:*:*:*:*:*:*:* (string)

matchCriteriaId : 8FB66BE3-1031-4315-AF85-309BE3C35D7D (string)

vulnerable : true (boolean)

}

10 : { »

criteria : cpe:2.3:a:hitachienergy:unem:r10c:*:*:*:*:*:*:* (string)

matchCriteriaId : F6DF9081-1544-4A69-9D9E-80759289056B (string)

vulnerable : true (boolean)

}

11 : { »

criteria : cpe:2.3:a:hitachienergy:unem:r11a:*:*:*:*:*:*:* (string)

matchCriteriaId : C50E14E9-D2BF-4B6C-BF87-C9E4233D3AD0 (string)

vulnerable : true (boolean)

}

12 : { »

criteria : cpe:2.3:a:hitachienergy:unem:r11b:*:*:*:*:*:*:* (string)

matchCriteriaId : 996564C6-8B44-4E89-A353-79B711A3DBBA (string)

vulnerable : true (boolean)

}

13 : { »

criteria : cpe:2.3:a:hitachienergy:unem:r14a:*:*:*:*:*:*:* (string)

matchCriteriaId : 6AB8CF64-17F7-488D-9763-A1487ECA405D (string)

vulnerable : true (boolean)

}

14 : { »

criteria : cpe:2.3:a:hitachienergy:unem:r14b:*:*:*:*:*:*:* (string)

matchCriteriaId : 6E96D583-2EBB-4AB2-A473-A0930E3B8D02 (string)

vulnerable : true (boolean)

}

15 : { »

criteria : cpe:2.3:a:hitachienergy:unem:r15a:*:*:*:*:*:*:* (string)

matchCriteriaId : E78C9E5B-5876-4F15-A98A-359193287446 (string)

vulnerable : true (boolean)

}

16 : { »

criteria : cpe:2.3:a:hitachienergy:unem:r15b:*:*:*:*:*:*:* (string)

matchCriteriaId : C3168F38-7B9E-4F4D-B6D0-1BAFB5FE05F5 (string)

vulnerable : true (boolean)

}

17 : { »

criteria : cpe:2.3:a:hitachienergy:unem:r16a:*:*:*:*:*:*:* (string)

matchCriteriaId : 7ABB4A53-07A0-4F9A-824B-A1AC71CCB44E (string)

vulnerable : true (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

]

}

]

descriptions : [ »

0 : { »

lang : en (string)

value : A vulnerability exists in a FOXMAN-UN and UNEM logging component, it only affects systems that use remote authentication to the network elements. If exploited an attacker could obtain confidential information. List of CPEs: * cpe:2.3:a:hitachienergy:foxman_un:R9C:*:*:*:*:*:*:* * cpe:2.3:a:hitachienergy:foxman_un:R10C:*:*:*:*:*:*:* * cpe:2.3:a:hitachienergy:foxman_un:R11A:*:*:*:*:*:*:* * cpe:2.3:a:hitachienergy:foxman_un:R11B:*:*:*:*:*:*:* * cpe:2.3:a:hitachienergy:foxman_un:R14A:*:*:*:*:*:*:* * cpe:2.3:a:hitachienergy:foxman_un:R14B:*:*:*:*:*:*:* * cpe:2.3:a:hitachienergy:foxman_un:R15A:*:*:*:*:*:*:* * cpe:2.3:a:hitachienergy:foxman_un:R15B:*:*:*:*:*:*:* * cpe:2.3:a:hitachienergy:foxman_un:R16A:*:*:*:*:*:*:* * * cpe:2.3:a:hitachienergy:unem:R9C:*:*:*:*:*:*:* * cpe:2.3:a:hitachienergy: unem :R10C:*:*:*:*:*:*:* * cpe:2.3:a:hitachienergy: unem :R11A:*:*:*:*:*:*:* * cpe:2.3:a:hitachienergy: unem :R11B:*:*:*:*:*:*:* * cpe:2.3:a:hitachienergy: unem :R14A:*:*:*:*:*:*:* * cpe:2.3:a:hitachienergy: unem :R14B:*:*:*:*:*:*:* * cpe:2.3:a:hitachienergy: unem :R15A:*:*:*:*:*:*:* * cpe:2.3:a:hitachienergy: unem :R15B:*:*:*:*:*:*:* * cpe:2.3:a:hitachienergy: unem :R16A:*:*:*:*:*:*:* (string)

}

]

id : CVE-2023-1711 (string)

lastModified : 2024-11-21T07:39:44.793 (string)

metrics : { »

cvssMetricV31 : [ »

0 : { »

cvssData : { »

attackComplexity : HIGH (string)

attackVector : LOCAL (string)

availabilityImpact : NONE (string)

baseScore : 4 (number)

baseSeverity : MEDIUM (string)

confidentialityImpact : HIGH (string)

integrityImpact : NONE (string)

privilegesRequired : HIGH (string)

scope : UNCHANGED (string)

userInteraction : REQUIRED (string)

vectorString : CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:U/C:H/I:N/A:N (string)

version : 3.1 (string)

}

exploitabilityScore : 0.3 (number)

impactScore : 3.6 (number)

source : cybersecurity@hitachienergy.com (string)

type : Secondary (string)

}

1 : { »

cvssData : { »

attackComplexity : LOW (string)

attackVector : LOCAL (string)

availabilityImpact : NONE (string)

baseScore : 4.4 (number)

baseSeverity : MEDIUM (string)

confidentialityImpact : HIGH (string)

integrityImpact : NONE (string)

privilegesRequired : HIGH (string)

scope : UNCHANGED (string)

userInteraction : NONE (string)

vectorString : CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N (string)

version : 3.1 (string)

}

exploitabilityScore : 0.8 (number)

impactScore : 3.6 (number)

source : nvd@nist.gov (string)

type : Primary (string)

}

]

}

published : 2023-05-30T19:15:09.753 (string)

references : [ »

0 : { »

source : cybersecurity@hitachienergy.com (string)

tags : [ »

0 : Vendor Advisory (string)

]

url : https://search.abb.com/library/Download.aspx?DocumentID=8DBD000155&LanguageCode=en&DocumentPartId=&Action=Launch (string)

}

1 : { »

source : cybersecurity@hitachienergy.com (string)

tags : [ »

0 : Vendor Advisory (string)

]

url : https://search.abb.com/library/Download.aspx?DocumentID=8DBD000166&LanguageCode=en&DocumentPartId=&Action=Launch (string)

}

2 : { »

source : af854a3a-2127-422b-91ae-364da2661108 (string)

tags : [ »

0 : Vendor Advisory (string)

]

url : https://search.abb.com/library/Download.aspx?DocumentID=8DBD000155&LanguageCode=en&DocumentPartId=&Action=Launch (string)

}

3 : { »

source : af854a3a-2127-422b-91ae-364da2661108 (string)

tags : [ »

0 : Vendor Advisory (string)

]

url : https://search.abb.com/library/Download.aspx?DocumentID=8DBD000166&LanguageCode=en&DocumentPartId=&Action=Launch (string)

}

]

sourceIdentifier : cybersecurity@hitachienergy.com (string)

vulnStatus : Modified (string)

weaknesses : [ »

0 : { »

description : [ »

0 : { »

lang : en (string)

value : CWE-117 (string)

}

]

source : cybersecurity@hitachienergy.com (string)

type : Secondary (string)

}

1 : { »

description : [ »

0 : { »

lang : en (string)

value : CWE-116 (string)

}

]

source : nvd@nist.gov (string)

type : Primary (string)

}

]

}

Metrics

Attack Vector Local

Attack Complexity High

Privileges Required High

Scope Unchanged

Confidentiality Impact High

Integrity Impact None

Availability Impact None

User Interaction Required

Exploitation none

Automatable no

Technical Impact partial

Affected Vendors & Products

Metrics

Attack Vector Local

Attack Complexity High

Privileges Required High

Scope Unchanged

Confidentiality Impact High

Integrity Impact None

Availability Impact None

User Interaction Required

Exploitation none

Automatable no

Technical Impact partial

Affected Vendors & Products

JSON object

JSON object

JSON object

JSON object