2024-08-15 22:03:13 +00:00

152 lines
4.7 KiB
JSON

{
"id": "CVE-2024-28024",
"sourceIdentifier": "cybersecurity@hitachienergy.com",
"published": "2024-06-11T19:16:06.243",
"lastModified": "2024-08-15T21:46:11.737",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "A vulnerability exists in the FOXMAN-UN/UNEM in which sensitive information is \nstored in cleartext within a resource that might be accessible to another control sphere."
},
{
"lang": "es",
"value": "Existe una vulnerabilidad en FOXMAN-UN/UNEM en la que informaci\u00f3n confidencial se almacena en texto plano dentro de un recurso que podr\u00eda ser accesible a otra esfera de control."
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "nvd@nist.gov",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:N",
"attackVector": "LOCAL",
"attackComplexity": "HIGH",
"privilegesRequired": "HIGH",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"availabilityImpact": "NONE",
"baseScore": 4.1,
"baseSeverity": "MEDIUM"
},
"exploitabilityScore": 0.5,
"impactScore": 3.6
},
{
"source": "cybersecurity@hitachienergy.com",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:L/I:N/A:N",
"attackVector": "LOCAL",
"attackComplexity": "HIGH",
"privilegesRequired": "HIGH",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"availabilityImpact": "NONE",
"baseScore": 1.9,
"baseSeverity": "LOW"
},
"exploitabilityScore": 0.5,
"impactScore": 1.4
}
]
},
"weaknesses": [
{
"source": "nvd@nist.gov",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-312"
}
]
},
{
"source": "cybersecurity@hitachienergy.com",
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-312"
}
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:hitachienergy:foxman-un:r15a:*:*:*:*:*:*:*",
"matchCriteriaId": "A7593C74-2882-45D3-AB32-3A45E3AECAAE"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:hitachienergy:foxman-un:r15b:*:*:*:*:*:*:*",
"matchCriteriaId": "47606044-296D-4561-B9DC-82659BC666F2"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:hitachienergy:foxman-un:r16a:*:*:*:*:*:*:*",
"matchCriteriaId": "7EE987B2-0620-44BB-AEA7-4E20CBE44822"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:hitachienergy:foxman-un:r16b:*:*:*:*:*:*:*",
"matchCriteriaId": "AE743C56-A17F-4FA7-9998-0C767E07518A"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:hitachienergy:unem:r15a:*:*:*:*:*:*:*",
"matchCriteriaId": "E78C9E5B-5876-4F15-A98A-359193287446"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:hitachienergy:unem:r15b:*:*:*:*:*:*:*",
"matchCriteriaId": "C3168F38-7B9E-4F4D-B6D0-1BAFB5FE05F5"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:hitachienergy:unem:r16a:*:*:*:*:*:*:*",
"matchCriteriaId": "7ABB4A53-07A0-4F9A-824B-A1AC71CCB44E"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:hitachienergy:unem:r16b:*:*:*:*:*:*:*",
"matchCriteriaId": "ADA6755A-0553-4246-B462-7580B080FDEF"
}
]
}
]
}
],
"references": [
{
"url": "https://publisher.hitachienergy.com/preview?DocumentId=8DBD000194&languageCode=en&Preview=true",
"source": "cybersecurity@hitachienergy.com",
"tags": [
"Vendor Advisory"
]
},
{
"url": "https://publisher.hitachienergy.com/preview?DocumentId=8DBD000201&languageCode=en&Preview=true",
"source": "cybersecurity@hitachienergy.com",
"tags": [
"Vendor Advisory"
]
}
]
}