CVE-2024-28021
First published: Tue Jun 11 2024(Updated: )
A vulnerability exists in the FOXMAN-UN/UNEM server that affects the message queueing mechanism’s certificate validation. If exploited an attacker could spoof a trusted entity causing a loss of confidentiality and integrity.
Credit: cybersecurity@hitachienergy.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Hitachi Energy Foxman Un | =r15b-pc4 | |
| Hitachi Energy Foxman Un | =r16b-pc2 | |
| Hitachi Energy Foxman Un | =r15a | |
| Hitachi Energy Foxman Un | =r16a | |
| Hitachi Energy Unem | =r15a | |
| Hitachi Energy Unem | =r15b-pc4 | |
| Hitachi Energy Unem | =r16a | |
| Hitachi Energy Unem | =r16b-pc2 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2024-28021?
CVE-2024-28021 has a high severity rating due to the potential for confidentiality and integrity loss when exploited.
How do I fix CVE-2024-28021?
To fix CVE-2024-28021, apply the latest patches provided by Hitachi Energy for affected versions of FOXMAN-UN and UNEM software.
Which versions are affected by CVE-2024-28021?
CVE-2024-28021 affects FOXMAN-UN versions r15b-pc4 and r16b-pc2, and UNEM versions r15a, r15b-pc4, r16a, and r16b-pc2.
What type of attack can exploit CVE-2024-28021?
CVE-2024-28021 can be exploited to spoof a trusted entity, compromising the system’s message queueing mechanism.
Is there a workaround for CVE-2024-28021?
Currently, no official workarounds are provided for CVE-2024-28021, and users are advised to apply patches as soon as they become available.
- agent/weakness
- agent/references
- agent/type
- agent/first-publish-date
- agent/author
- agent/event
- agent/description
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/severity
- agent/last-modified-date
- agent/source
- agent/tags
- collector/nvd-api
- source/NVD
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- vendor/hitachienergy
- canonical/hitachi energy foxman un
- version/hitachi energy foxman un/r15b-pc4
- version/hitachi energy foxman un/r16b-pc2
- version/hitachi energy foxman un/r15a
- version/hitachi energy foxman un/r16a
- canonical/hitachi energy unem
- version/hitachi energy unem/r15a
- version/hitachi energy unem/r15b-pc4
- version/hitachi energy unem/r16a
- version/hitachi energy unem/r16b-pc2