CVE-2022-3928: Hardcoded credential is found in the message queue
Hardcoded credential is found in affected products' message queue. An attacker that manages to exploit this vulnerability will be able to access data to the internal message queue.
This issue affects
FOXMAN-UN product: FOXMAN-UN R15B, FOXMAN-UN R15A, FOXMAN-UN R14B, FOXMAN-UN R14A, FOXMAN-UN R11B, FOXMAN-UN R11A, FOXMAN-UN R10C, FOXMAN-UN R9C; UNEM product: UNEM R15B, UNEM R15A, UNEM R14B, UNEM R14A, UNEM R11B, UNEM R11A, UNEM R10C, UNEM R9C.
List of CPEs: cpe:2.3:a:hitachienergy:foxman-un:R15B:::::::
cpe:2.3:a:hitachienergy:foxman-un:R15A::::::: cpe:2.3:a:hitachienergy:foxman-un:R14B::::::: cpe:2.3:a:hitachienergy:foxman-un:R14A::::::: cpe:2.3:a:hitachienergy:foxman-un:R11B::::::: cpe:2.3:a:hitachienergy:foxman-un:R11A::::::: cpe:2.3:a:hitachienergy:foxman-un:R10C::::::: cpe:2.3:a:hitachienergy:foxman-un:R9C::::::: cpe:2.3:a:hitachienergy:unem:R15B:::::::
cpe:2.3:a:hitachienergy:unem:R15A::::::: cpe:2.3:a:hitachienergy:unem:R14B::::::: cpe:2.3:a:hitachienergy:unem:R14A::::::: cpe:2.3:a:hitachienergy:unem:R11B::::::: cpe:2.3:a:hitachienergy:unem:R11A::::::: cpe:2.3:a:hitachienergy:unem:R10C::::::: cpe:2.3:a:hitachienergy:unem:R9C:::::::
Affected Software
Event History
Frequently Asked Questions
What is CVE-2022-3928?
CVE-2022-3928 is a vulnerability where a hardcoded credential is found in affected products' message queue, allowing attackers to access data in the internal message queue.
Which products are affected by CVE-2022-3928?
The affected products are FOXMAN-UN R15B, FOXMAN-UN R15A, FOXMAN-UN R14B, FOXMAN-UN R14A, FOXMAN-UN R11B, FOXMAN-UN up to exclusive R16A, UNEM up to exclusive R16A.
What is the severity of CVE-2022-3928?
CVE-2022-3928 has a severity rating of 5.5 (High).
How can an attacker exploit CVE-2022-3928?
An attacker can exploit CVE-2022-3928 by leveraging the hardcoded credential found in the affected products' message queue to gain unauthorized access to data in the internal message queue.
Are there any references for CVE-2022-3928?
Yes, you can find more information about CVE-2022-3928 at the following references: [Reference 1](https://search.abb.com/library/Download.aspx?DocumentID=8DBD000083&LanguageCode=en&DocumentPartId=&Action=Launch), [Reference 2](https://search.abb.com/library/Download.aspx?DocumentID=8DBD000084&LanguageCode=en&DocumentPartId=&Action=Launch).