CVE-2024-28024 - Vulnerability Details

Vendors	Products
Hitachi Energy	Foxman-un Unem
Hitachienergy	Foxman-un Unem

Link	Providers
https://publisher.hitachienergy.com/preview?DocumentId=8DBD000194&languageCode=en&Preview=true
https://publisher.hitachienergy.com/preview?DocumentId=8DBD000201&languageCode=en&Preview=true

Type	Values Removed	Values Added
First Time appeared		Hitachi Energy Hitachi Energy foxman-un Hitachi Energy unem
CPEs		cpe:2.3:a:hitachi_energy:foxman-un:::::::: cpe:2.3:a:hitachi_energy:unem::::::::
Vendors & Products		Hitachi Energy Hitachi Energy foxman-un Hitachi Energy unem
Metrics		ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}`

Type	Values Removed	Values Added
Metrics	cvssV3_1 `{'score': 1.9, 'vector': 'CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:L/I:N/A:N'}`	cvssV3_1 `{'score': 4.1, 'vector': 'CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:N'}`

Type	Values Removed	Values Added
First Time appeared		Hitachienergy Hitachienergy foxman-un Hitachienergy unem
CPEs		cpe:2.3:a:hitachienergy:foxman-un:r15a:::::::* cpe:2.3:a:hitachienergy:foxman-un:r15b:::::::* cpe:2.3:a:hitachienergy:foxman-un:r16a:::::::* cpe:2.3:a:hitachienergy:foxman-un:r16b:::::::* cpe:2.3:a:hitachienergy:unem:r15a:::::::* cpe:2.3:a:hitachienergy:unem:r15b:::::::* cpe:2.3:a:hitachienergy:unem:r16a:::::::* cpe:2.3:a:hitachienergy:unem:r16b:::::::*
Vendors & Products		Hitachienergy Hitachienergy foxman-un Hitachienergy unem

Show plain JSON

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2024-28024", "assignerOrgId": "e383dce4-0c27-4495-91c4-0db157728d17", "state": "PUBLISHED", "assignerShortName": "Hitachi Energy", "dateReserved": "2024-02-29T13:42:00.746Z", "datePublished": "2024-06-11T18:17:54.877Z", "dateUpdated": "2024-10-29T14:42:42.760Z"}, "containers": {"cna": {"affected": [{"defaultStatus": "unaffected", "product": "FOXMAN-UN", "vendor": "Hitachi Energy", "versions": [{"status": "affected", "version": "FOXMAN-UN R16B"}, {"status": "affected", "version": "FOXMAN-UN R15B"}, {"status": "affected", "version": "FOXMAN-UN R16A"}, {"status": "affected", "version": "FOXMAN-UN R15A"}]}, {"defaultStatus": "unaffected", "product": "UNEM", "vendor": "Hitachi Energy", "versions": [{"status": "affected", "version": "UNEM R16B"}, {"status": "affected", "version": "UNEM R15B"}, {"status": "affected", "version": "UNEM R16A"}, {"status": "affected", "version": "UNEM R15A"}]}], "descriptions": [{"lang": "en", "supportingMedia": [{"base64": false, "type": "text/html", "value": "A vulnerability exists in the FOXMAN-UN/UNEM in which sensitive information is \nstored in cleartext within a resource that might be accessible to another control sphere."}], "value": "A vulnerability exists in the FOXMAN-UN/UNEM in which sensitive information is \nstored in cleartext within a resource that might be accessible to another control sphere."}], "metrics": [{"cvssV3_1": {"attackComplexity": "HIGH", "attackVector": "LOCAL", "availabilityImpact": "NONE", "baseScore": 4.1, "baseSeverity": "MEDIUM", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:N", "version": "3.1"}, "format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "problemTypes": [{"descriptions": [{"cweId": "CWE-312", "description": "CWE-312 Cleartext Storage of Sensitive Information", "lang": "en", "type": "CWE"}]}], "providerMetadata": {"orgId": "e383dce4-0c27-4495-91c4-0db157728d17", "shortName": "Hitachi Energy", "dateUpdated": "2024-10-29T14:42:42.760Z"}, "references": [{"url": "https://publisher.hitachienergy.com/preview?DocumentId=8DBD000201&languageCode=en&Preview=true"}, {"url": "https://publisher.hitachienergy.com/preview?DocumentId=8DBD000194&languageCode=en&Preview=true"}], "source": {"discovery": "UNKNOWN"}, "x_generator": {"engine": "Vulnogram 0.2.0"}}, "adp": [{"affected": [{"vendor": "hitachi_energy", "product": "foxman-un", "cpes": ["cpe:2.3:a:hitachi_energy:foxman-un:*:*:*:*:*:*:*:*"], "defaultStatus": "unaffected", "versions": [{"version": "FOXMAN-UN R16B", "status": "affected"}, {"version": "FOXMAN-UN R15B", "status": "affected"}, {"version": "FOXMAN-UN R16A", "status": "affected"}, {"version": "FOXMAN-UN R15A", "status": "affected"}]}, {"vendor": "hitachi_energy", "product": "unem", "cpes": ["cpe:2.3:a:hitachi_energy:unem:*:*:*:*:*:*:*:*"], "defaultStatus": "unaffected", "versions": [{"version": "UNEM R16B", "status": "affected"}, {"version": "UNEM R15B", "status": "affected"}, {"version": "UNEM R16A", "status": "affected"}, {"version": "UNEM R15A", "status": "affected"}]}], "metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2024-06-11T20:22:36.317764Z", "id": "CVE-2024-28024", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-06-11T20:39:33.569Z"}}, {"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-02T00:48:47.698Z"}, "title": "CVE Program Container", "references": [{"url": "https://publisher.hitachienergy.com/preview?DocumentId=8DBD000201&languageCode=en&Preview=true", "tags": ["x_transferred"]}, {"url": "https://publisher.hitachienergy.com/preview?DocumentId=8DBD000194&languageCode=en&Preview=true", "tags": ["x_transferred"]}]}]}}

{

dataType : CVE_RECORD (string)

dataVersion : 5.1 (string)

cveMetadata : { »

cveId : CVE-2024-28024 (string)

assignerOrgId : e383dce4-0c27-4495-91c4-0db157728d17 (string)

state : PUBLISHED (string)

assignerShortName : Hitachi Energy (string)

dateReserved : 2024-02-29T13:42:00.746Z (string)

datePublished : 2024-06-11T18:17:54.877Z (string)

dateUpdated : 2024-10-29T14:42:42.760Z (string)

}

containers : { »

cna : { »

affected : [ »

0 : { »

defaultStatus : unaffected (string)

product : FOXMAN-UN (string)

vendor : Hitachi Energy (string)

versions : [ »

0 : { »

status : affected (string)

version : FOXMAN-UN R16B (string)

}

1 : { »

status : affected (string)

version : FOXMAN-UN R15B (string)

}

2 : { »

status : affected (string)

version : FOXMAN-UN R16A (string)

}

3 : { »

status : affected (string)

version : FOXMAN-UN R15A (string)

}

]

}

1 : { »

defaultStatus : unaffected (string)

product : UNEM (string)

vendor : Hitachi Energy (string)

versions : [ »

0 : { »

status : affected (string)

version : UNEM R16B (string)

}

1 : { »

status : affected (string)

version : UNEM R15B (string)

}

2 : { »

status : affected (string)

version : UNEM R16A (string)

}

3 : { »

status : affected (string)

version : UNEM R15A (string)

}

]

}

]

descriptions : [ »

0 : { »

lang : en (string)

supportingMedia : [ »

0 : { »

base64 : false (boolean)

type : text/html (string)

value : A vulnerability exists in the FOXMAN-UN/UNEM in which sensitive information is stored in cleartext within a resource that might be accessible to another control sphere. (string)

}

]

value : A vulnerability exists in the FOXMAN-UN/UNEM in which sensitive information is stored in cleartext within a resource that might be accessible to another control sphere. (string)

}

]

metrics : [ »

0 : { »

cvssV3_1 : { »

attackComplexity : HIGH (string)

attackVector : LOCAL (string)

availabilityImpact : NONE (string)

baseScore : 4.1 (number)

baseSeverity : MEDIUM (string)

confidentialityImpact : HIGH (string)

integrityImpact : NONE (string)

privilegesRequired : HIGH (string)

scope : UNCHANGED (string)

userInteraction : NONE (string)

vectorString : CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:N (string)

version : 3.1 (string)

}

format : CVSS (string)

scenarios : [ »

0 : { »

lang : en (string)

value : GENERAL (string)

}

]

}

]

problemTypes : [ »

0 : { »

descriptions : [ »

0 : { »

cweId : CWE-312 (string)

description : CWE-312 Cleartext Storage of Sensitive Information (string)

lang : en (string)

type : CWE (string)

}

]

}

]

providerMetadata : { »

orgId : e383dce4-0c27-4495-91c4-0db157728d17 (string)

shortName : Hitachi Energy (string)

dateUpdated : 2024-10-29T14:42:42.760Z (string)

}

references : [ »

0 : { »

url : https://publisher.hitachienergy.com/preview?DocumentId=8DBD000201&languageCode=en&Preview=true (string)

}

1 : { »

url : https://publisher.hitachienergy.com/preview?DocumentId=8DBD000194&languageCode=en&Preview=true (string)

}

]

source : { »

discovery : UNKNOWN (string)

}

x_generator : { »

engine : Vulnogram 0.2.0 (string)

}

adp : [ »

0 : { »

affected : [ »

0 : { »

vendor : hitachi_energy (string)

product : foxman-un (string)

cpes : [ »

0 : cpe:2.3:a:hitachi_energy:foxman-un:*:*:*:*:*:*:*:* (string)

]

defaultStatus : unaffected (string)

versions : [ »

0 : { »

version : FOXMAN-UN R16B (string)

status : affected (string)

}

1 : { »

version : FOXMAN-UN R15B (string)

status : affected (string)

}

2 : { »

version : FOXMAN-UN R16A (string)

status : affected (string)

}

3 : { »

version : FOXMAN-UN R15A (string)

status : affected (string)

}

]

}

1 : { »

vendor : hitachi_energy (string)

product : unem (string)

cpes : [ »

0 : cpe:2.3:a:hitachi_energy:unem:*:*:*:*:*:*:*:* (string)

]

defaultStatus : unaffected (string)

versions : [ »

0 : { »

version : UNEM R16B (string)

status : affected (string)

}

1 : { »

version : UNEM R15B (string)

status : affected (string)

}

2 : { »

version : UNEM R16A (string)

status : affected (string)

}

3 : { »

version : UNEM R15A (string)

status : affected (string)

}

]

}

]

metrics : [ »

0 : { »

other : { »

type : ssvc (string)

content : { »

timestamp : 2024-06-11T20:22:36.317764Z (string)

id : CVE-2024-28024 (string)

options : [ »

0 : { »

Exploitation : none (string)

}

1 : { »

Automatable : no (string)

}

2 : { »

Technical Impact : partial (string)

}

]

role : CISA Coordinator (string)

version : 2.0.3 (string)

}

]

title : CISA ADP Vulnrichment (string)

providerMetadata : { »

orgId : 134c704f-9b21-4f2e-91b3-4a467353bcc0 (string)

shortName : CISA-ADP (string)

dateUpdated : 2024-06-11T20:39:33.569Z (string)

}

1 : { »

providerMetadata : { »

orgId : af854a3a-2127-422b-91ae-364da2661108 (string)

shortName : CVE (string)

dateUpdated : 2024-08-02T00:48:47.698Z (string)

}

title : CVE Program Container (string)

references : [ »

0 : { »

url : https://publisher.hitachienergy.com/preview?DocumentId=8DBD000201&languageCode=en&Preview=true (string)

tags : [ »

0 : x_transferred (string)

]

}

1 : { »

url : https://publisher.hitachienergy.com/preview?DocumentId=8DBD000194&languageCode=en&Preview=true (string)

tags : [ »

0 : x_transferred (string)

]

}

]

}

]

}

Show plain JSON

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CVE Program Container", "references": [{"url": "https://publisher.hitachienergy.com/preview?DocumentId=8DBD000201&languageCode=en&Preview=true", "tags": ["x_transferred"]}, {"url": "https://publisher.hitachienergy.com/preview?DocumentId=8DBD000194&languageCode=en&Preview=true", "tags": ["x_transferred"]}], "providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-02T00:48:47.698Z"}}, {"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2024-28024", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2024-06-11T20:22:36.317764Z"}}}], "affected": [{"cpes": ["cpe:2.3:a:hitachi_energy:foxman-un:*:*:*:*:*:*:*:*"], "vendor": "hitachi_energy", "product": "foxman-un", "versions": [{"status": "affected", "version": "FOXMAN-UN R16B"}, {"status": "affected", "version": "FOXMAN-UN R15B"}, {"status": "affected", "version": "FOXMAN-UN R16A"}, {"status": "affected", "version": "FOXMAN-UN R15A"}], "defaultStatus": "unaffected"}, {"cpes": ["cpe:2.3:a:hitachi_energy:unem:*:*:*:*:*:*:*:*"], "vendor": "hitachi_energy", "product": "unem", "versions": [{"status": "affected", "version": "UNEM R16B"}, {"status": "affected", "version": "UNEM R15B"}, {"status": "affected", "version": "UNEM R16A"}, {"status": "affected", "version": "UNEM R15A"}], "defaultStatus": "unaffected"}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-06-11T20:35:35.873Z"}}], "cna": {"source": {"discovery": "UNKNOWN"}, "metrics": [{"format": "CVSS", "cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 4.1, "attackVector": "LOCAL", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "HIGH", "availabilityImpact": "NONE", "privilegesRequired": "HIGH", "confidentialityImpact": "HIGH"}, "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "affected": [{"vendor": "Hitachi Energy", "product": "FOXMAN-UN", "versions": [{"status": "affected", "version": "FOXMAN-UN R16B"}, {"status": "affected", "version": "FOXMAN-UN R15B"}, {"status": "affected", "version": "FOXMAN-UN R16A"}, {"status": "affected", "version": "FOXMAN-UN R15A"}], "defaultStatus": "unaffected"}, {"vendor": "Hitachi Energy", "product": "UNEM", "versions": [{"status": "affected", "version": "UNEM R16B"}, {"status": "affected", "version": "UNEM R15B"}, {"status": "affected", "version": "UNEM R16A"}, {"status": "affected", "version": "UNEM R15A"}], "defaultStatus": "unaffected"}], "references": [{"url": "https://publisher.hitachienergy.com/preview?DocumentId=8DBD000201&languageCode=en&Preview=true"}, {"url": "https://publisher.hitachienergy.com/preview?DocumentId=8DBD000194&languageCode=en&Preview=true"}], "x_generator": {"engine": "Vulnogram 0.2.0"}, "descriptions": [{"lang": "en", "value": "A vulnerability exists in the FOXMAN-UN/UNEM in which sensitive information is \nstored in cleartext within a resource that might be accessible to another control sphere.", "supportingMedia": [{"type": "text/html", "value": "A vulnerability exists in the FOXMAN-UN/UNEM in which sensitive information is \nstored in cleartext within a resource that might be accessible to another control sphere.", "base64": false}]}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-312", "description": "CWE-312 Cleartext Storage of Sensitive Information"}]}], "providerMetadata": {"orgId": "e383dce4-0c27-4495-91c4-0db157728d17", "shortName": "Hitachi Energy", "dateUpdated": "2024-10-29T14:42:42.760Z"}}}, "cveMetadata": {"cveId": "CVE-2024-28024", "state": "PUBLISHED", "dateUpdated": "2024-10-29T14:42:42.760Z", "dateReserved": "2024-02-29T13:42:00.746Z", "assignerOrgId": "e383dce4-0c27-4495-91c4-0db157728d17", "datePublished": "2024-06-11T18:17:54.877Z", "assignerShortName": "Hitachi Energy"}, "dataVersion": "5.1"}

{

dataType : CVE_RECORD (string)

containers : { »

adp : [ »

0 : { »

title : CVE Program Container (string)

references : [ »

0 : { »

url : https://publisher.hitachienergy.com/preview?DocumentId=8DBD000201&languageCode=en&Preview=true (string)

tags : [ »

0 : x_transferred (string)

]

}

1 : { »

url : https://publisher.hitachienergy.com/preview?DocumentId=8DBD000194&languageCode=en&Preview=true (string)

tags : [ »

0 : x_transferred (string)

]

}

]

providerMetadata : { »

orgId : af854a3a-2127-422b-91ae-364da2661108 (string)

shortName : CVE (string)

dateUpdated : 2024-08-02T00:48:47.698Z (string)

}

1 : { »

title : CISA ADP Vulnrichment (string)

metrics : [ »

0 : { »

other : { »

type : ssvc (string)

content : { »

id : CVE-2024-28024 (string)

role : CISA Coordinator (string)

options : [ »

0 : { »

Exploitation : none (string)

}

1 : { »

Automatable : no (string)

}

2 : { »

Technical Impact : partial (string)

}

]

version : 2.0.3 (string)

timestamp : 2024-06-11T20:22:36.317764Z (string)

}

]

affected : [ »

0 : { »

cpes : [ »

0 : cpe:2.3:a:hitachi_energy:foxman-un:*:*:*:*:*:*:*:* (string)

]

vendor : hitachi_energy (string)

product : foxman-un (string)

versions : [ »

0 : { »

status : affected (string)

version : FOXMAN-UN R16B (string)

}

1 : { »

status : affected (string)

version : FOXMAN-UN R15B (string)

}

2 : { »

status : affected (string)

version : FOXMAN-UN R16A (string)

}

3 : { »

status : affected (string)

version : FOXMAN-UN R15A (string)

}

]

defaultStatus : unaffected (string)

}

1 : { »

cpes : [ »

0 : cpe:2.3:a:hitachi_energy:unem:*:*:*:*:*:*:*:* (string)

]

vendor : hitachi_energy (string)

product : unem (string)

versions : [ »

0 : { »

status : affected (string)

version : UNEM R16B (string)

}

1 : { »

status : affected (string)

version : UNEM R15B (string)

}

2 : { »

status : affected (string)

version : UNEM R16A (string)

}

3 : { »

status : affected (string)

version : UNEM R15A (string)

}

]

defaultStatus : unaffected (string)

}

]

providerMetadata : { »

orgId : 134c704f-9b21-4f2e-91b3-4a467353bcc0 (string)

shortName : CISA-ADP (string)

dateUpdated : 2024-06-11T20:35:35.873Z (string)

}

]

cna : { »

source : { »

discovery : UNKNOWN (string)

}

metrics : [ »

0 : { »

format : CVSS (string)

cvssV3_1 : { »

scope : UNCHANGED (string)

version : 3.1 (string)

baseScore : 4.1 (number)

attackVector : LOCAL (string)

baseSeverity : MEDIUM (string)

vectorString : CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:N (string)

integrityImpact : NONE (string)

userInteraction : NONE (string)

attackComplexity : HIGH (string)

availabilityImpact : NONE (string)

privilegesRequired : HIGH (string)

confidentialityImpact : HIGH (string)

}

scenarios : [ »

0 : { »

lang : en (string)

value : GENERAL (string)

}

]

}

]

affected : [ »

0 : { »

vendor : Hitachi Energy (string)

product : FOXMAN-UN (string)

versions : [ »

0 : { »

status : affected (string)

version : FOXMAN-UN R16B (string)

}

1 : { »

status : affected (string)

version : FOXMAN-UN R15B (string)

}

2 : { »

status : affected (string)

version : FOXMAN-UN R16A (string)

}

3 : { »

status : affected (string)

version : FOXMAN-UN R15A (string)

}

]

defaultStatus : unaffected (string)

}

1 : { »

vendor : Hitachi Energy (string)

product : UNEM (string)

versions : [ »

0 : { »

status : affected (string)

version : UNEM R16B (string)

}

1 : { »

status : affected (string)

version : UNEM R15B (string)

}

2 : { »

status : affected (string)

version : UNEM R16A (string)

}

3 : { »

status : affected (string)

version : UNEM R15A (string)

}

]

defaultStatus : unaffected (string)

}

]

references : [ »

0 : { »

url : https://publisher.hitachienergy.com/preview?DocumentId=8DBD000201&languageCode=en&Preview=true (string)

}

1 : { »

url : https://publisher.hitachienergy.com/preview?DocumentId=8DBD000194&languageCode=en&Preview=true (string)

}

]

x_generator : { »

engine : Vulnogram 0.2.0 (string)

}

descriptions : [ »

0 : { »

lang : en (string)

value : A vulnerability exists in the FOXMAN-UN/UNEM in which sensitive information is stored in cleartext within a resource that might be accessible to another control sphere. (string)

supportingMedia : [ »

0 : { »

type : text/html (string)

value : A vulnerability exists in the FOXMAN-UN/UNEM in which sensitive information is stored in cleartext within a resource that might be accessible to another control sphere. (string)

base64 : false (boolean)

}

]

}

]

problemTypes : [ »

0 : { »

descriptions : [ »

0 : { »

lang : en (string)

type : CWE (string)

cweId : CWE-312 (string)

description : CWE-312 Cleartext Storage of Sensitive Information (string)

}

]

}

]

providerMetadata : { »

orgId : e383dce4-0c27-4495-91c4-0db157728d17 (string)

shortName : Hitachi Energy (string)

dateUpdated : 2024-10-29T14:42:42.760Z (string)

}

cveMetadata : { »

cveId : CVE-2024-28024 (string)

state : PUBLISHED (string)

dateUpdated : 2024-10-29T14:42:42.760Z (string)

dateReserved : 2024-02-29T13:42:00.746Z (string)

assignerOrgId : e383dce4-0c27-4495-91c4-0db157728d17 (string)

datePublished : 2024-06-11T18:17:54.877Z (string)

assignerShortName : Hitachi Energy (string)

}

dataVersion : 5.1 (string)

}

Show plain JSON

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:hitachienergy:foxman-un:r15a:*:*:*:*:*:*:*", "matchCriteriaId": "A7593C74-2882-45D3-AB32-3A45E3AECAAE", "vulnerable": true}, {"criteria": "cpe:2.3:a:hitachienergy:foxman-un:r15b:*:*:*:*:*:*:*", "matchCriteriaId": "47606044-296D-4561-B9DC-82659BC666F2", "vulnerable": true}, {"criteria": "cpe:2.3:a:hitachienergy:foxman-un:r16a:*:*:*:*:*:*:*", "matchCriteriaId": "7EE987B2-0620-44BB-AEA7-4E20CBE44822", "vulnerable": true}, {"criteria": "cpe:2.3:a:hitachienergy:foxman-un:r16b:*:*:*:*:*:*:*", "matchCriteriaId": "AE743C56-A17F-4FA7-9998-0C767E07518A", "vulnerable": true}, {"criteria": "cpe:2.3:a:hitachienergy:unem:r15a:*:*:*:*:*:*:*", "matchCriteriaId": "E78C9E5B-5876-4F15-A98A-359193287446", "vulnerable": true}, {"criteria": "cpe:2.3:a:hitachienergy:unem:r15b:*:*:*:*:*:*:*", "matchCriteriaId": "C3168F38-7B9E-4F4D-B6D0-1BAFB5FE05F5", "vulnerable": true}, {"criteria": "cpe:2.3:a:hitachienergy:unem:r16a:*:*:*:*:*:*:*", "matchCriteriaId": "7ABB4A53-07A0-4F9A-824B-A1AC71CCB44E", "vulnerable": true}, {"criteria": "cpe:2.3:a:hitachienergy:unem:r16b:*:*:*:*:*:*:*", "matchCriteriaId": "ADA6755A-0553-4246-B462-7580B080FDEF", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "descriptions": [{"lang": "en", "value": "A vulnerability exists in the FOXMAN-UN/UNEM in which sensitive information is \nstored in cleartext within a resource that might be accessible to another control sphere."}, {"lang": "es", "value": "Existe una vulnerabilidad en FOXMAN-UN/UNEM en la que informaci\u00f3n confidencial se almacena en texto plano dentro de un recurso que podr\u00eda ser accesible a otra esfera de control."}], "id": "CVE-2024-28024", "lastModified": "2024-11-21T09:05:39.953", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "HIGH", "attackVector": "LOCAL", "availabilityImpact": "NONE", "baseScore": 4.1, "baseSeverity": "MEDIUM", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:N", "version": "3.1"}, "exploitabilityScore": 0.5, "impactScore": 3.6, "source": "cybersecurity@hitachienergy.com", "type": "Secondary"}, {"cvssData": {"attackComplexity": "HIGH", "attackVector": "LOCAL", "availabilityImpact": "NONE", "baseScore": 4.1, "baseSeverity": "MEDIUM", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:N", "version": "3.1"}, "exploitabilityScore": 0.5, "impactScore": 3.6, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2024-06-11T19:16:06.243", "references": [{"source": "cybersecurity@hitachienergy.com", "tags": ["Vendor Advisory"], "url": "https://publisher.hitachienergy.com/preview?DocumentId=8DBD000194&languageCode=en&Preview=true"}, {"source": "cybersecurity@hitachienergy.com", "tags": ["Vendor Advisory"], "url": "https://publisher.hitachienergy.com/preview?DocumentId=8DBD000201&languageCode=en&Preview=true"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Vendor Advisory"], "url": "https://publisher.hitachienergy.com/preview?DocumentId=8DBD000194&languageCode=en&Preview=true"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Vendor Advisory"], "url": "https://publisher.hitachienergy.com/preview?DocumentId=8DBD000201&languageCode=en&Preview=true"}], "sourceIdentifier": "cybersecurity@hitachienergy.com", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-312"}], "source": "cybersecurity@hitachienergy.com", "type": "Secondary"}, {"description": [{"lang": "en", "value": "CWE-312"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{

configurations : [ »

0 : { »

nodes : [ »

0 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:a:hitachienergy:foxman-un:r15a:*:*:*:*:*:*:* (string)

matchCriteriaId : A7593C74-2882-45D3-AB32-3A45E3AECAAE (string)

vulnerable : true (boolean)

}

1 : { »

criteria : cpe:2.3:a:hitachienergy:foxman-un:r15b:*:*:*:*:*:*:* (string)

matchCriteriaId : 47606044-296D-4561-B9DC-82659BC666F2 (string)

vulnerable : true (boolean)

}

2 : { »

criteria : cpe:2.3:a:hitachienergy:foxman-un:r16a:*:*:*:*:*:*:* (string)

matchCriteriaId : 7EE987B2-0620-44BB-AEA7-4E20CBE44822 (string)

vulnerable : true (boolean)

}

3 : { »

criteria : cpe:2.3:a:hitachienergy:foxman-un:r16b:*:*:*:*:*:*:* (string)

matchCriteriaId : AE743C56-A17F-4FA7-9998-0C767E07518A (string)

vulnerable : true (boolean)

}

4 : { »

criteria : cpe:2.3:a:hitachienergy:unem:r15a:*:*:*:*:*:*:* (string)

matchCriteriaId : E78C9E5B-5876-4F15-A98A-359193287446 (string)

vulnerable : true (boolean)

}

5 : { »

criteria : cpe:2.3:a:hitachienergy:unem:r15b:*:*:*:*:*:*:* (string)

matchCriteriaId : C3168F38-7B9E-4F4D-B6D0-1BAFB5FE05F5 (string)

vulnerable : true (boolean)

}

6 : { »

criteria : cpe:2.3:a:hitachienergy:unem:r16a:*:*:*:*:*:*:* (string)

matchCriteriaId : 7ABB4A53-07A0-4F9A-824B-A1AC71CCB44E (string)

vulnerable : true (boolean)

}

7 : { »

criteria : cpe:2.3:a:hitachienergy:unem:r16b:*:*:*:*:*:*:* (string)

matchCriteriaId : ADA6755A-0553-4246-B462-7580B080FDEF (string)

vulnerable : true (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

]

}

]

descriptions : [ »

0 : { »

lang : en (string)

value : A vulnerability exists in the FOXMAN-UN/UNEM in which sensitive information is stored in cleartext within a resource that might be accessible to another control sphere. (string)

}

1 : { »

lang : es (string)

value : Existe una vulnerabilidad en FOXMAN-UN/UNEM en la que información confidencial se almacena en texto plano dentro de un recurso que podría ser accesible a otra esfera de control. (string)

}

]

id : CVE-2024-28024 (string)

lastModified : 2024-11-21T09:05:39.953 (string)

metrics : { »

cvssMetricV31 : [ »

0 : { »

cvssData : { »

attackComplexity : HIGH (string)

attackVector : LOCAL (string)

availabilityImpact : NONE (string)

baseScore : 4.1 (number)

baseSeverity : MEDIUM (string)

confidentialityImpact : HIGH (string)

integrityImpact : NONE (string)

privilegesRequired : HIGH (string)

scope : UNCHANGED (string)

userInteraction : NONE (string)

vectorString : CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:N (string)

version : 3.1 (string)

}

exploitabilityScore : 0.5 (number)

impactScore : 3.6 (number)

source : cybersecurity@hitachienergy.com (string)

type : Secondary (string)

}

1 : { »

cvssData : { »

attackComplexity : HIGH (string)

attackVector : LOCAL (string)

availabilityImpact : NONE (string)

baseScore : 4.1 (number)

baseSeverity : MEDIUM (string)

confidentialityImpact : HIGH (string)

integrityImpact : NONE (string)

privilegesRequired : HIGH (string)

scope : UNCHANGED (string)

userInteraction : NONE (string)

vectorString : CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:N (string)

version : 3.1 (string)

}

exploitabilityScore : 0.5 (number)

impactScore : 3.6 (number)

source : nvd@nist.gov (string)

type : Primary (string)

}

]

}

published : 2024-06-11T19:16:06.243 (string)

references : [ »

0 : { »

source : cybersecurity@hitachienergy.com (string)

tags : [ »

0 : Vendor Advisory (string)

]

url : https://publisher.hitachienergy.com/preview?DocumentId=8DBD000194&languageCode=en&Preview=true (string)

}

1 : { »

source : cybersecurity@hitachienergy.com (string)

tags : [ »

0 : Vendor Advisory (string)

]

url : https://publisher.hitachienergy.com/preview?DocumentId=8DBD000201&languageCode=en&Preview=true (string)

}

2 : { »

source : af854a3a-2127-422b-91ae-364da2661108 (string)

tags : [ »

0 : Vendor Advisory (string)

]

url : https://publisher.hitachienergy.com/preview?DocumentId=8DBD000194&languageCode=en&Preview=true (string)

}

3 : { »

source : af854a3a-2127-422b-91ae-364da2661108 (string)

tags : [ »

0 : Vendor Advisory (string)

]

url : https://publisher.hitachienergy.com/preview?DocumentId=8DBD000201&languageCode=en&Preview=true (string)

}

]

sourceIdentifier : cybersecurity@hitachienergy.com (string)

vulnStatus : Modified (string)

weaknesses : [ »

0 : { »

description : [ »

0 : { »

lang : en (string)

value : CWE-312 (string)

}

]

source : cybersecurity@hitachienergy.com (string)

type : Secondary (string)

}

1 : { »

description : [ »

0 : { »

lang : en (string)

value : CWE-312 (string)

}

]

source : nvd@nist.gov (string)

type : Primary (string)

}

]

}

Metrics

Attack Vector Local

Attack Complexity High

Privileges Required High

Scope Unchanged

Confidentiality Impact High

Integrity Impact None

Availability Impact None

User Interaction None

Exploitation none

Automatable no

Technical Impact partial

Affected Vendors & Products

Metrics

Attack Vector Local

Attack Complexity High

Privileges Required High

Scope Unchanged

Confidentiality Impact High

Integrity Impact None

Availability Impact None

User Interaction None

Exploitation none

Automatable no

Technical Impact partial

Affected Vendors & Products

JSON object

JSON object

JSON object

JSON object