CVE-2024-2013

An authentication bypass vulnerability exists in the FOXMAN-UN/UNEM server / API Gateway component that if exploited allows attackers without any access to interact with the services and the post-authentication attack surface.

Score

CVSS 3.1 10.0 Critical

Status

Modified - cybersecurity@hitachienergy.com

Published

2024-06-11

Last modified

2024-08-01

Weaknesses

CWE-288, CWE-306

Affected products

• Foxman-un (Hitachi Energy)
• Unem (Hitachi Energy)
• Foxman-un (Hitachienergy)
• Unem (Hitachienergy)

References

• https://publisher.hitachienergy.com/preview?DocumentId=8DBD000201&languageCode=en&Preview=true