CVE-2024-28020 is a user/password reuse vulnerability affecting Hitachi Energy FOXMAN-UN and UNEM application and server management. A highly privileged malicious user could exploit this to gain extended access to the server and other services through complex routines. With a CVSS score of 8.0 (HIGH), this vulnerability has a network attack vector, high attack complexity, and high potential for confidentiality, integrity, and availability impact. There is currently no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
r15aCPE matchmatch criteria | cpe:2.3:a:hitachienergy:foxman-un:r15a:*:*:*:*:*:*:* | ||
r15bCPE matchmatch criteria | cpe:2.3:a:hitachienergy:foxman-un:r15b:*:*:*:*:*:*:* | ||
r16aCPE matchmatch criteria | cpe:2.3:a:hitachienergy:foxman-un:r16a:*:*:*:*:*:*:* | ||
r16bCPE matchmatch criteria | cpe:2.3:a:hitachienergy:foxman-un:r16b:*:*:*:*:*:*:* | ||
r15aCPE matchmatch criteria | cpe:2.3:a:hitachienergy:unem:r15a:*:*:*:*:*:*:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H
The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.4 Bluesky, 0.2 Mastodon, and 0.1 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.3 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.