Description
An authentication bypass vulnerability exists in the FOXMAN-UN/UNEM server /
API Gateway component that if exploited allows attackers without
any access to interact with the services and the post-authentication
attack surface.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Hitachi Energy | FOXMAN-UN | FOXMAN-UN R16B PC2, FOXMAN-UN R15B PC4, FOXMAN-UN R16A, FOXMAN-UN R15A | FOXMAN-UN R16B PC3 |
| Hitachi Energy | UNEM | UNEM R16B PC2, UNEM R15B PC4, UNEM R15B PC5, UNEM R16B, UNEM R15A | UNEM R16B PC3 |
Advisories 2
- ICSA-25-014-01 Hitachi Energy FOXMAN-UN CISA ICS & IT advisories · Oct 29, 2024
- ICSA-25-030-01 Hitachi Energy UNEM CISA ICS & IT advisories · Jun 11, 2024