Description

A vulnerability exists in the UNEM server / APIGateway that if exploited allows a malicious user to perform an arbitrary number of authentication attempts using different passwords, and eventually gain access to other components in the same security realm using the targeted account.

INFO

Published Date :

2024-06-11T18:15:42.349Z

Last Modified :

2025-05-20T14:00:48.279Z

Source :

Hitachi Energy
AFFECTED PRODUCTS

The following products are affected by CVE-2024-28022 vulnerability.

Vendors Products
Hitachienergy
  • Foxman-un
  • Unem
REFERENCES

CVSS Vulnerability Scoring System

Detailed values of each vector for above chart.
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality Impact
Integrity Impact
Availability Impact