Description
A vulnerability exists in the UNEM server / APIGateway that if exploited allows a malicious user to perform an arbitrary number of
authentication attempts using different passwords, and eventually
gain access to other components in the same security realm using
the targeted account.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Hitachi Energy | FOXMAN-UN | FOXMAN-UN R16B, FOXMAN-UN R15B, FOXMAN-UN R16A, FOXMAN-UN R15A | — |
| Hitachi Energy | UNEM | UNEM R16B, UNEM R15B, UNEM 16A, UNEM 15A | — |
Advisories 2
- ICSA-25-014-01 Hitachi Energy FOXMAN-UN CISA ICS & IT advisories · Oct 29, 2024
- ICSA-25-030-01 Hitachi Energy UNEM CISA ICS & IT advisories · Jun 11, 2024