CVE-2024-28021 - Vulnerability Details

Vendors	Products
Hitachienergy	Foxman-un Foxman Un Unem

Link	Providers
https://publisher.hitachienergy.com/preview?DocumentId=8DBD000194&languageCode=en&Preview=true
https://publisher.hitachienergy.com/preview?DocumentId=8DBD000201&languageCode=en&Preview=true

Type	Values Removed	Values Added
CPEs		cpe:2.3:a:hitachienergy:foxman-un:::::::: cpe:2.3:a:hitachienergy:unem::::::::
Metrics		ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}`

Type	Values Removed	Values Added
Metrics	cvssV3_1 `{'score': 8, 'vector': 'CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N'}`	cvssV3_1 `{'score': 7.4, 'vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N'}`

Type	Values Removed	Values Added
First Time appeared		Hitachienergy Hitachienergy foxman-un Hitachienergy foxman Un Hitachienergy unem
CPEs		cpe:2.3:a:hitachienergy:foxman-un:r15b:pc4:::::: cpe:2.3:a:hitachienergy:foxman-un:r16b:pc2:::::: cpe:2.3:a:hitachienergy:foxman_un:r15a:::::::* cpe:2.3:a:hitachienergy:foxman_un:r16a:::::::* cpe:2.3:a:hitachienergy:unem:r15a:::::::* cpe:2.3:a:hitachienergy:unem:r15b:pc4:::::: cpe:2.3:a:hitachienergy:unem:r16a:::::::* cpe:2.3:a:hitachienergy:unem:r16b:pc2::::::
Vendors & Products		Hitachienergy Hitachienergy foxman-un Hitachienergy foxman Un Hitachienergy unem

Show plain JSON

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2024-28021", "assignerOrgId": "e383dce4-0c27-4495-91c4-0db157728d17", "state": "PUBLISHED", "assignerShortName": "Hitachi Energy", "dateReserved": "2024-02-29T13:42:00.746Z", "datePublished": "2024-06-11T13:30:12.765Z", "dateUpdated": "2024-10-29T14:27:45.146Z"}, "containers": {"cna": {"affected": [{"defaultStatus": "unaffected", "product": "FOXMAN-UN", "vendor": "Hitachi Energy", "versions": [{"status": "affected", "version": "FOXMAN-UN R16B PC2", "versionType": "custom"}, {"lessThanOrEqual": "FOXMAN-UN R16B PC4", "status": "unaffected", "version": "FOXMAN-UN R16B PC3", "versionType": "custom"}, {"status": "affected", "version": "FOXMAN-UN R15B PC4", "versionType": "custom"}, {"status": "unaffected", "version": "FOXMAN-UN R15B PC5", "versionType": "custom"}]}, {"defaultStatus": "unaffected", "product": "UNEM", "vendor": "Hitachi Energy", "versions": [{"status": "affected", "version": "UNEM R16B PC2", "versionType": "custom"}, {"lessThanOrEqual": "UNEM R16B PC4", "status": "unaffected", "version": "UNEM R16B PC3", "versionType": "custom"}, {"status": "affected", "version": "UNEM R15B PC4", "versionType": "custom"}, {"status": "unaffected", "version": "UNEM R15B PC5", "versionType": "custom"}]}], "descriptions": [{"lang": "en", "supportingMedia": [{"base64": false, "type": "text/html", "value": "A vulnerability exists in the FOXMAN-UN/UNEM server that affects the message \nqueueing mechanism\u2019s certificate validation. If exploited an attacker could spoof a trusted entity causing a loss of confidentiality \nand integrity."}], "value": "A vulnerability exists in the FOXMAN-UN/UNEM server that affects the message \nqueueing mechanism\u2019s certificate validation. If exploited an attacker could spoof a trusted entity causing a loss of confidentiality \nand integrity."}], "metrics": [{"cvssV3_1": {"attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 7.4, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N", "version": "3.1"}, "format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "problemTypes": [{"descriptions": [{"cweId": "CWE-295", "description": "CWE-295 Improper Certificate Validation", "lang": "en", "type": "CWE"}]}], "providerMetadata": {"orgId": "e383dce4-0c27-4495-91c4-0db157728d17", "shortName": "Hitachi Energy", "dateUpdated": "2024-10-29T14:27:45.146Z"}, "references": [{"url": "https://publisher.hitachienergy.com/preview?DocumentId=8DBD000201&languageCode=en&Preview=true"}, {"url": "https://publisher.hitachienergy.com/preview?DocumentId=8DBD000194&languageCode=en&Preview=true"}], "source": {"discovery": "UNKNOWN"}, "x_generator": {"engine": "Vulnogram 0.2.0"}}, "adp": [{"affected": [{"vendor": "hitachienergy", "product": "unem", "cpes": ["cpe:2.3:a:hitachienergy:unem:*:*:*:*:*:*:*:*"], "defaultStatus": "unaffected", "versions": [{"version": "r16bpc2", "status": "affected"}, {"version": "r15bpc4", "status": "affected"}]}, {"vendor": "hitachienergy", "product": "foxman-un", "cpes": ["cpe:2.3:a:hitachienergy:foxman-un:*:*:*:*:*:*:*:*"], "defaultStatus": "unaffected", "versions": [{"version": "r16bpc2", "status": "affected"}, {"version": "r15bpc4", "status": "affected"}]}], "metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2024-06-11T14:36:08.316220Z", "id": "CVE-2024-28021", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-06-11T15:13:35.936Z"}}, {"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-02T00:48:47.815Z"}, "title": "CVE Program Container", "references": [{"url": "https://publisher.hitachienergy.com/preview?DocumentId=8DBD000201&languageCode=en&Preview=true", "tags": ["x_transferred"]}, {"url": "https://publisher.hitachienergy.com/preview?DocumentId=8DBD000194&languageCode=en&Preview=true", "tags": ["x_transferred"]}]}]}}

{

dataType : CVE_RECORD (string)

dataVersion : 5.1 (string)

cveMetadata : { »

cveId : CVE-2024-28021 (string)

assignerOrgId : e383dce4-0c27-4495-91c4-0db157728d17 (string)

state : PUBLISHED (string)

assignerShortName : Hitachi Energy (string)

dateReserved : 2024-02-29T13:42:00.746Z (string)

datePublished : 2024-06-11T13:30:12.765Z (string)

dateUpdated : 2024-10-29T14:27:45.146Z (string)

}

containers : { »

cna : { »

affected : [ »

0 : { »

defaultStatus : unaffected (string)

product : FOXMAN-UN (string)

vendor : Hitachi Energy (string)

versions : [ »

0 : { »

status : affected (string)

version : FOXMAN-UN R16B PC2 (string)

versionType : custom (string)

}

1 : { »

lessThanOrEqual : FOXMAN-UN R16B PC4 (string)

status : unaffected (string)

version : FOXMAN-UN R16B PC3 (string)

versionType : custom (string)

}

2 : { »

status : affected (string)

version : FOXMAN-UN R15B PC4 (string)

versionType : custom (string)

}

3 : { »

status : unaffected (string)

version : FOXMAN-UN R15B PC5 (string)

versionType : custom (string)

}

]

}

1 : { »

defaultStatus : unaffected (string)

product : UNEM (string)

vendor : Hitachi Energy (string)

versions : [ »

0 : { »

status : affected (string)

version : UNEM R16B PC2 (string)

versionType : custom (string)

}

1 : { »

lessThanOrEqual : UNEM R16B PC4 (string)

status : unaffected (string)

version : UNEM R16B PC3 (string)

versionType : custom (string)

}

2 : { »

status : affected (string)

version : UNEM R15B PC4 (string)

versionType : custom (string)

}

3 : { »

status : unaffected (string)

version : UNEM R15B PC5 (string)

versionType : custom (string)

}

]

}

]

descriptions : [ »

0 : { »

lang : en (string)

supportingMedia : [ »

0 : { »

base64 : false (boolean)

type : text/html (string)

value : A vulnerability exists in the FOXMAN-UN/UNEM server that affects the message queueing mechanism’s certificate validation. If exploited an attacker could spoof a trusted entity causing a loss of confidentiality and integrity. (string)

}

]

value : A vulnerability exists in the FOXMAN-UN/UNEM server that affects the message queueing mechanism’s certificate validation. If exploited an attacker could spoof a trusted entity causing a loss of confidentiality and integrity. (string)

}

]

metrics : [ »

0 : { »

cvssV3_1 : { »

attackComplexity : HIGH (string)

attackVector : NETWORK (string)

availabilityImpact : NONE (string)

baseScore : 7.4 (number)

baseSeverity : HIGH (string)

confidentialityImpact : HIGH (string)

integrityImpact : HIGH (string)

privilegesRequired : NONE (string)

scope : UNCHANGED (string)

userInteraction : NONE (string)

vectorString : CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N (string)

version : 3.1 (string)

}

format : CVSS (string)

scenarios : [ »

0 : { »

lang : en (string)

value : GENERAL (string)

}

]

}

]

problemTypes : [ »

0 : { »

descriptions : [ »

0 : { »

cweId : CWE-295 (string)

description : CWE-295 Improper Certificate Validation (string)

lang : en (string)

type : CWE (string)

}

]

}

]

providerMetadata : { »

orgId : e383dce4-0c27-4495-91c4-0db157728d17 (string)

shortName : Hitachi Energy (string)

dateUpdated : 2024-10-29T14:27:45.146Z (string)

}

references : [ »

0 : { »

url : https://publisher.hitachienergy.com/preview?DocumentId=8DBD000201&languageCode=en&Preview=true (string)

}

1 : { »

url : https://publisher.hitachienergy.com/preview?DocumentId=8DBD000194&languageCode=en&Preview=true (string)

}

]

source : { »

discovery : UNKNOWN (string)

}

x_generator : { »

engine : Vulnogram 0.2.0 (string)

}

adp : [ »

0 : { »

affected : [ »

0 : { »

vendor : hitachienergy (string)

product : unem (string)

cpes : [ »

0 : cpe:2.3:a:hitachienergy:unem:*:*:*:*:*:*:*:* (string)

]

defaultStatus : unaffected (string)

versions : [ »

0 : { »

version : r16bpc2 (string)

status : affected (string)

}

1 : { »

version : r15bpc4 (string)

status : affected (string)

}

]

}

1 : { »

vendor : hitachienergy (string)

product : foxman-un (string)

cpes : [ »

0 : cpe:2.3:a:hitachienergy:foxman-un:*:*:*:*:*:*:*:* (string)

]

defaultStatus : unaffected (string)

versions : [ »

0 : { »

version : r16bpc2 (string)

status : affected (string)

}

1 : { »

version : r15bpc4 (string)

status : affected (string)

}

]

}

]

metrics : [ »

0 : { »

other : { »

type : ssvc (string)

content : { »

timestamp : 2024-06-11T14:36:08.316220Z (string)

id : CVE-2024-28021 (string)

options : [ »

0 : { »

Exploitation : none (string)

}

1 : { »

Automatable : no (string)

}

2 : { »

Technical Impact : total (string)

}

]

role : CISA Coordinator (string)

version : 2.0.3 (string)

}

]

title : CISA ADP Vulnrichment (string)

providerMetadata : { »

orgId : 134c704f-9b21-4f2e-91b3-4a467353bcc0 (string)

shortName : CISA-ADP (string)

dateUpdated : 2024-06-11T15:13:35.936Z (string)

}

1 : { »

providerMetadata : { »

orgId : af854a3a-2127-422b-91ae-364da2661108 (string)

shortName : CVE (string)

dateUpdated : 2024-08-02T00:48:47.815Z (string)

}

title : CVE Program Container (string)

references : [ »

0 : { »

url : https://publisher.hitachienergy.com/preview?DocumentId=8DBD000201&languageCode=en&Preview=true (string)

tags : [ »

0 : x_transferred (string)

]

}

1 : { »

url : https://publisher.hitachienergy.com/preview?DocumentId=8DBD000194&languageCode=en&Preview=true (string)

tags : [ »

0 : x_transferred (string)

]

}

]

}

]

}

Show plain JSON

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CVE Program Container", "references": [{"url": "https://publisher.hitachienergy.com/preview?DocumentId=8DBD000201&languageCode=en&Preview=true", "tags": ["x_transferred"]}, {"url": "https://publisher.hitachienergy.com/preview?DocumentId=8DBD000194&languageCode=en&Preview=true", "tags": ["x_transferred"]}], "providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-02T00:48:47.815Z"}}, {"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2024-28021", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2024-06-11T14:36:08.316220Z"}}}], "affected": [{"cpes": ["cpe:2.3:a:hitachienergy:unem:*:*:*:*:*:*:*:*"], "vendor": "hitachienergy", "product": "unem", "versions": [{"status": "affected", "version": "r16bpc2"}, {"status": "affected", "version": "r15bpc4"}], "defaultStatus": "unaffected"}, {"cpes": ["cpe:2.3:a:hitachienergy:foxman-un:*:*:*:*:*:*:*:*"], "vendor": "hitachienergy", "product": "foxman-un", "versions": [{"status": "affected", "version": "r16bpc2"}, {"status": "affected", "version": "r15bpc4"}], "defaultStatus": "unaffected"}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-06-11T15:12:55.956Z"}}], "cna": {"source": {"discovery": "UNKNOWN"}, "metrics": [{"format": "CVSS", "cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.4, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "HIGH", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "affected": [{"vendor": "Hitachi Energy", "product": "FOXMAN-UN", "versions": [{"status": "affected", "version": "FOXMAN-UN R16B PC2", "versionType": "custom"}, {"status": "unaffected", "version": "FOXMAN-UN R16B PC3", "versionType": "custom", "lessThanOrEqual": "FOXMAN-UN R16B PC4"}, {"status": "affected", "version": "FOXMAN-UN R15B PC4", "versionType": "custom"}, {"status": "unaffected", "version": "FOXMAN-UN R15B PC5", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"vendor": "Hitachi Energy", "product": "UNEM", "versions": [{"status": "affected", "version": "UNEM R16B PC2", "versionType": "custom"}, {"status": "unaffected", "version": "UNEM R16B PC3", "versionType": "custom", "lessThanOrEqual": "UNEM R16B PC4"}, {"status": "affected", "version": "UNEM R15B PC4", "versionType": "custom"}, {"status": "unaffected", "version": "UNEM R15B PC5", "versionType": "custom"}], "defaultStatus": "unaffected"}], "references": [{"url": "https://publisher.hitachienergy.com/preview?DocumentId=8DBD000201&languageCode=en&Preview=true"}, {"url": "https://publisher.hitachienergy.com/preview?DocumentId=8DBD000194&languageCode=en&Preview=true"}], "x_generator": {"engine": "Vulnogram 0.2.0"}, "descriptions": [{"lang": "en", "value": "A vulnerability exists in the FOXMAN-UN/UNEM server that affects the message \nqueueing mechanism\u2019s certificate validation. If exploited an attacker could spoof a trusted entity causing a loss of confidentiality \nand integrity.", "supportingMedia": [{"type": "text/html", "value": "A vulnerability exists in the FOXMAN-UN/UNEM server that affects the message \nqueueing mechanism\u2019s certificate validation. If exploited an attacker could spoof a trusted entity causing a loss of confidentiality \nand integrity.", "base64": false}]}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-295", "description": "CWE-295 Improper Certificate Validation"}]}], "providerMetadata": {"orgId": "e383dce4-0c27-4495-91c4-0db157728d17", "shortName": "Hitachi Energy", "dateUpdated": "2024-10-29T14:27:45.146Z"}}}, "cveMetadata": {"cveId": "CVE-2024-28021", "state": "PUBLISHED", "dateUpdated": "2024-10-29T14:27:45.146Z", "dateReserved": "2024-02-29T13:42:00.746Z", "assignerOrgId": "e383dce4-0c27-4495-91c4-0db157728d17", "datePublished": "2024-06-11T13:30:12.765Z", "assignerShortName": "Hitachi Energy"}, "dataVersion": "5.1"}

{

dataType : CVE_RECORD (string)

containers : { »

adp : [ »

0 : { »

title : CVE Program Container (string)

references : [ »

0 : { »

url : https://publisher.hitachienergy.com/preview?DocumentId=8DBD000201&languageCode=en&Preview=true (string)

tags : [ »

0 : x_transferred (string)

]

}

1 : { »

url : https://publisher.hitachienergy.com/preview?DocumentId=8DBD000194&languageCode=en&Preview=true (string)

tags : [ »

0 : x_transferred (string)

]

}

]

providerMetadata : { »

orgId : af854a3a-2127-422b-91ae-364da2661108 (string)

shortName : CVE (string)

dateUpdated : 2024-08-02T00:48:47.815Z (string)

}

1 : { »

title : CISA ADP Vulnrichment (string)

metrics : [ »

0 : { »

other : { »

type : ssvc (string)

content : { »

id : CVE-2024-28021 (string)

role : CISA Coordinator (string)

options : [ »

0 : { »

Exploitation : none (string)

}

1 : { »

Automatable : no (string)

}

2 : { »

Technical Impact : total (string)

}

]

version : 2.0.3 (string)

timestamp : 2024-06-11T14:36:08.316220Z (string)

}

]

affected : [ »

0 : { »

cpes : [ »

0 : cpe:2.3:a:hitachienergy:unem:*:*:*:*:*:*:*:* (string)

]

vendor : hitachienergy (string)

product : unem (string)

versions : [ »

0 : { »

status : affected (string)

version : r16bpc2 (string)

}

1 : { »

status : affected (string)

version : r15bpc4 (string)

}

]

defaultStatus : unaffected (string)

}

1 : { »

cpes : [ »

0 : cpe:2.3:a:hitachienergy:foxman-un:*:*:*:*:*:*:*:* (string)

]

vendor : hitachienergy (string)

product : foxman-un (string)

versions : [ »

0 : { »

status : affected (string)

version : r16bpc2 (string)

}

1 : { »

status : affected (string)

version : r15bpc4 (string)

}

]

defaultStatus : unaffected (string)

}

]

providerMetadata : { »

orgId : 134c704f-9b21-4f2e-91b3-4a467353bcc0 (string)

shortName : CISA-ADP (string)

dateUpdated : 2024-06-11T15:12:55.956Z (string)

}

]

cna : { »

source : { »

discovery : UNKNOWN (string)

}

metrics : [ »

0 : { »

format : CVSS (string)

cvssV3_1 : { »

scope : UNCHANGED (string)

version : 3.1 (string)

baseScore : 7.4 (number)

attackVector : NETWORK (string)

baseSeverity : HIGH (string)

vectorString : CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N (string)

integrityImpact : HIGH (string)

userInteraction : NONE (string)

attackComplexity : HIGH (string)

availabilityImpact : NONE (string)

privilegesRequired : NONE (string)

confidentialityImpact : HIGH (string)

}

scenarios : [ »

0 : { »

lang : en (string)

value : GENERAL (string)

}

]

}

]

affected : [ »

0 : { »

vendor : Hitachi Energy (string)

product : FOXMAN-UN (string)

versions : [ »

0 : { »

status : affected (string)

version : FOXMAN-UN R16B PC2 (string)

versionType : custom (string)

}

1 : { »

status : unaffected (string)

version : FOXMAN-UN R16B PC3 (string)

versionType : custom (string)

lessThanOrEqual : FOXMAN-UN R16B PC4 (string)

}

2 : { »

status : affected (string)

version : FOXMAN-UN R15B PC4 (string)

versionType : custom (string)

}

3 : { »

status : unaffected (string)

version : FOXMAN-UN R15B PC5 (string)

versionType : custom (string)

}

]

defaultStatus : unaffected (string)

}

1 : { »

vendor : Hitachi Energy (string)

product : UNEM (string)

versions : [ »

0 : { »

status : affected (string)

version : UNEM R16B PC2 (string)

versionType : custom (string)

}

1 : { »

status : unaffected (string)

version : UNEM R16B PC3 (string)

versionType : custom (string)

lessThanOrEqual : UNEM R16B PC4 (string)

}

2 : { »

status : affected (string)

version : UNEM R15B PC4 (string)

versionType : custom (string)

}

3 : { »

status : unaffected (string)

version : UNEM R15B PC5 (string)

versionType : custom (string)

}

]

defaultStatus : unaffected (string)

}

]

references : [ »

0 : { »

url : https://publisher.hitachienergy.com/preview?DocumentId=8DBD000201&languageCode=en&Preview=true (string)

}

1 : { »

url : https://publisher.hitachienergy.com/preview?DocumentId=8DBD000194&languageCode=en&Preview=true (string)

}

]

x_generator : { »

engine : Vulnogram 0.2.0 (string)

}

descriptions : [ »

0 : { »

lang : en (string)

value : A vulnerability exists in the FOXMAN-UN/UNEM server that affects the message queueing mechanism’s certificate validation. If exploited an attacker could spoof a trusted entity causing a loss of confidentiality and integrity. (string)

supportingMedia : [ »

0 : { »

type : text/html (string)

value : A vulnerability exists in the FOXMAN-UN/UNEM server that affects the message queueing mechanism’s certificate validation. If exploited an attacker could spoof a trusted entity causing a loss of confidentiality and integrity. (string)

base64 : false (boolean)

}

]

}

]

problemTypes : [ »

0 : { »

descriptions : [ »

0 : { »

lang : en (string)

type : CWE (string)

cweId : CWE-295 (string)

description : CWE-295 Improper Certificate Validation (string)

}

]

}

]

providerMetadata : { »

orgId : e383dce4-0c27-4495-91c4-0db157728d17 (string)

shortName : Hitachi Energy (string)

dateUpdated : 2024-10-29T14:27:45.146Z (string)

}

cveMetadata : { »

cveId : CVE-2024-28021 (string)

state : PUBLISHED (string)

dateUpdated : 2024-10-29T14:27:45.146Z (string)

dateReserved : 2024-02-29T13:42:00.746Z (string)

assignerOrgId : e383dce4-0c27-4495-91c4-0db157728d17 (string)

datePublished : 2024-06-11T13:30:12.765Z (string)

assignerShortName : Hitachi Energy (string)

}

dataVersion : 5.1 (string)

}

Show plain JSON

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:hitachienergy:foxman-un:r15b:pc4:*:*:*:*:*:*", "matchCriteriaId": "7BFAA55C-0815-4ACA-A649-F1F910411885", "vulnerable": true}, {"criteria": "cpe:2.3:a:hitachienergy:foxman-un:r16b:pc2:*:*:*:*:*:*", "matchCriteriaId": "A2009AD7-6DF9-4DFC-B9F2-8632AC037A27", "vulnerable": true}, {"criteria": "cpe:2.3:a:hitachienergy:foxman_un:r15a:*:*:*:*:*:*:*", "matchCriteriaId": "DE718EB5-3F54-4CCB-A34E-5BA0DF87EEF0", "vulnerable": true}, {"criteria": "cpe:2.3:a:hitachienergy:foxman_un:r16a:*:*:*:*:*:*:*", "matchCriteriaId": "3ED924CD-4EBF-453E-BC07-40EB415F2585", "vulnerable": true}, {"criteria": "cpe:2.3:a:hitachienergy:unem:r15a:*:*:*:*:*:*:*", "matchCriteriaId": "E78C9E5B-5876-4F15-A98A-359193287446", "vulnerable": true}, {"criteria": "cpe:2.3:a:hitachienergy:unem:r15b:pc4:*:*:*:*:*:*", "matchCriteriaId": "73AAF812-D503-4672-98A7-53C332317A30", "vulnerable": true}, {"criteria": "cpe:2.3:a:hitachienergy:unem:r16a:*:*:*:*:*:*:*", "matchCriteriaId": "7ABB4A53-07A0-4F9A-824B-A1AC71CCB44E", "vulnerable": true}, {"criteria": "cpe:2.3:a:hitachienergy:unem:r16b:pc2:*:*:*:*:*:*", "matchCriteriaId": "D83E9A04-633A-493B-BD7A-ED28B88A521D", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "descriptions": [{"lang": "en", "value": "A vulnerability exists in the FOXMAN-UN/UNEM server that affects the message \nqueueing mechanism\u2019s certificate validation. If exploited an attacker could spoof a trusted entity causing a loss of confidentiality \nand integrity."}, {"lang": "es", "value": "Existe una vulnerabilidad en el servidor FOXMAN-UN/UNEM que afecta la validaci\u00f3n de certificados del mecanismo de cola de mensajes. Si se explota, un atacante podr\u00eda falsificar una entidad confiable y provocar una p\u00e9rdida de confidencialidad e integridad."}], "id": "CVE-2024-28021", "lastModified": "2024-11-21T09:05:39.497", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 7.4, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N", "version": "3.1"}, "exploitabilityScore": 2.2, "impactScore": 5.2, "source": "cybersecurity@hitachienergy.com", "type": "Secondary"}, {"cvssData": {"attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 7.4, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N", "version": "3.1"}, "exploitabilityScore": 2.2, "impactScore": 5.2, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2024-06-11T14:15:10.587", "references": [{"source": "cybersecurity@hitachienergy.com", "tags": ["Vendor Advisory"], "url": "https://publisher.hitachienergy.com/preview?DocumentId=8DBD000194&languageCode=en&Preview=true"}, {"source": "cybersecurity@hitachienergy.com", "tags": ["Vendor Advisory"], "url": "https://publisher.hitachienergy.com/preview?DocumentId=8DBD000201&languageCode=en&Preview=true"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Vendor Advisory"], "url": "https://publisher.hitachienergy.com/preview?DocumentId=8DBD000194&languageCode=en&Preview=true"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Vendor Advisory"], "url": "https://publisher.hitachienergy.com/preview?DocumentId=8DBD000201&languageCode=en&Preview=true"}], "sourceIdentifier": "cybersecurity@hitachienergy.com", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-295"}], "source": "cybersecurity@hitachienergy.com", "type": "Secondary"}, {"description": [{"lang": "en", "value": "CWE-295"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{

configurations : [ »

0 : { »

nodes : [ »

0 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:a:hitachienergy:foxman-un:r15b:pc4:*:*:*:*:*:* (string)

matchCriteriaId : 7BFAA55C-0815-4ACA-A649-F1F910411885 (string)

vulnerable : true (boolean)

}

1 : { »

criteria : cpe:2.3:a:hitachienergy:foxman-un:r16b:pc2:*:*:*:*:*:* (string)

matchCriteriaId : A2009AD7-6DF9-4DFC-B9F2-8632AC037A27 (string)

vulnerable : true (boolean)

}

2 : { »

criteria : cpe:2.3:a:hitachienergy:foxman_un:r15a:*:*:*:*:*:*:* (string)

matchCriteriaId : DE718EB5-3F54-4CCB-A34E-5BA0DF87EEF0 (string)

vulnerable : true (boolean)

}

3 : { »

criteria : cpe:2.3:a:hitachienergy:foxman_un:r16a:*:*:*:*:*:*:* (string)

matchCriteriaId : 3ED924CD-4EBF-453E-BC07-40EB415F2585 (string)

vulnerable : true (boolean)

}

4 : { »

criteria : cpe:2.3:a:hitachienergy:unem:r15a:*:*:*:*:*:*:* (string)

matchCriteriaId : E78C9E5B-5876-4F15-A98A-359193287446 (string)

vulnerable : true (boolean)

}

5 : { »

criteria : cpe:2.3:a:hitachienergy:unem:r15b:pc4:*:*:*:*:*:* (string)

matchCriteriaId : 73AAF812-D503-4672-98A7-53C332317A30 (string)

vulnerable : true (boolean)

}

6 : { »

criteria : cpe:2.3:a:hitachienergy:unem:r16a:*:*:*:*:*:*:* (string)

matchCriteriaId : 7ABB4A53-07A0-4F9A-824B-A1AC71CCB44E (string)

vulnerable : true (boolean)

}

7 : { »

criteria : cpe:2.3:a:hitachienergy:unem:r16b:pc2:*:*:*:*:*:* (string)

matchCriteriaId : D83E9A04-633A-493B-BD7A-ED28B88A521D (string)

vulnerable : true (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

]

}

]

descriptions : [ »

0 : { »

lang : en (string)

value : A vulnerability exists in the FOXMAN-UN/UNEM server that affects the message queueing mechanism’s certificate validation. If exploited an attacker could spoof a trusted entity causing a loss of confidentiality and integrity. (string)

}

1 : { »

lang : es (string)

value : Existe una vulnerabilidad en el servidor FOXMAN-UN/UNEM que afecta la validación de certificados del mecanismo de cola de mensajes. Si se explota, un atacante podría falsificar una entidad confiable y provocar una pérdida de confidencialidad e integridad. (string)

}

]

id : CVE-2024-28021 (string)

lastModified : 2024-11-21T09:05:39.497 (string)

metrics : { »

cvssMetricV31 : [ »

0 : { »

cvssData : { »

attackComplexity : HIGH (string)

attackVector : NETWORK (string)

availabilityImpact : NONE (string)

baseScore : 7.4 (number)

baseSeverity : HIGH (string)

confidentialityImpact : HIGH (string)

integrityImpact : HIGH (string)

privilegesRequired : NONE (string)

scope : UNCHANGED (string)

userInteraction : NONE (string)

vectorString : CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N (string)

version : 3.1 (string)

}

exploitabilityScore : 2.2 (number)

impactScore : 5.2 (number)

source : cybersecurity@hitachienergy.com (string)

type : Secondary (string)

}

1 : { »

cvssData : { »

attackComplexity : HIGH (string)

attackVector : NETWORK (string)

availabilityImpact : NONE (string)

baseScore : 7.4 (number)

baseSeverity : HIGH (string)

confidentialityImpact : HIGH (string)

integrityImpact : HIGH (string)

privilegesRequired : NONE (string)

scope : UNCHANGED (string)

userInteraction : NONE (string)

vectorString : CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N (string)

version : 3.1 (string)

}

exploitabilityScore : 2.2 (number)

impactScore : 5.2 (number)

source : nvd@nist.gov (string)

type : Primary (string)

}

]

}

published : 2024-06-11T14:15:10.587 (string)

references : [ »

0 : { »

source : cybersecurity@hitachienergy.com (string)

tags : [ »

0 : Vendor Advisory (string)

]

url : https://publisher.hitachienergy.com/preview?DocumentId=8DBD000194&languageCode=en&Preview=true (string)

}

1 : { »

source : cybersecurity@hitachienergy.com (string)

tags : [ »

0 : Vendor Advisory (string)

]

url : https://publisher.hitachienergy.com/preview?DocumentId=8DBD000201&languageCode=en&Preview=true (string)

}

2 : { »

source : af854a3a-2127-422b-91ae-364da2661108 (string)

tags : [ »

0 : Vendor Advisory (string)

]

url : https://publisher.hitachienergy.com/preview?DocumentId=8DBD000194&languageCode=en&Preview=true (string)

}

3 : { »

source : af854a3a-2127-422b-91ae-364da2661108 (string)

tags : [ »

0 : Vendor Advisory (string)

]

url : https://publisher.hitachienergy.com/preview?DocumentId=8DBD000201&languageCode=en&Preview=true (string)

}

]

sourceIdentifier : cybersecurity@hitachienergy.com (string)

vulnStatus : Modified (string)

weaknesses : [ »

0 : { »

description : [ »

0 : { »

lang : en (string)

value : CWE-295 (string)

}

]

source : cybersecurity@hitachienergy.com (string)

type : Secondary (string)

}

1 : { »

description : [ »

0 : { »

lang : en (string)

value : CWE-295 (string)

}

]

source : nvd@nist.gov (string)

type : Primary (string)

}

]

}

Metrics

Attack Vector Network

Attack Complexity High

Privileges Required None

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact None

User Interaction None

Exploitation none

Automatable no

Technical Impact total

Affected Vendors & Products

Metrics

Attack Vector Network

Attack Complexity High

Privileges Required None

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact None

User Interaction None

Exploitation none

Automatable no

Technical Impact total

Affected Vendors & Products

JSON object

JSON object

JSON object

JSON object