CVE-2024-28022: Medium severity hitachi energy foxman un vulnerability
A vulnerability exists in the UNEM server / APIGateway that if exploited allows a malicious user to perform an arbitrary number of authentication attempts using different passwords, and eventually gain access to other components in the same security realm using the targeted account.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-28022?
CVE-2024-28022 has been assigned a high severity rating due to the potential for unauthorized access through brute-force authentication.
How do I fix CVE-2024-28022?
To mitigate CVE-2024-28022, it is recommended to implement strong password policies and limit the number of authentication attempts.
Which software versions are affected by CVE-2024-28022?
CVE-2024-28022 affects Hitachi Energy's Foxman UN and UNEM versions r15a, r15b, r16a, and r16b.
Can CVE-2024-28022 lead to further exploits?
Yes, successfully exploiting CVE-2024-28022 could allow a malicious user to gain access to additional components within the same security realm.
What is the primary impact of CVE-2024-28022?
The primary impact of CVE-2024-28022 is the potential for unauthorized access through increased brute-force authentication attempts.