Vulnerability-Lookup

Search criteria

Vendor

Product

Assigner (CNA or root)

Sources

Sort by

Order

CVSS min

CVSS max

Apply ordering (override relevance)

CVE-2024-41153 (GCVE-0-2024-41153)

Vulnerability from nvd – Published: 2024-10-29 12:30 – Updated: 2025-11-04 16:00

Summary

Command injection vulnerability in the Edge Computing UI for the TRO600 series radios that allows for the execution of arbitrary system commands. If exploited, an attacker with write access to the web UI can execute commands on the device with root privileges, far more extensive than what the write privilege intends.

Severity

7.2 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

SSVC

Exploitation: none Automatable: no Technical Impact: total

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2024-10-29 13:54 UTC

CWE

CWE-78 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

Assigner

Hitachi Energy CNA

CNA scorecard C 68/100 over 12 records in the last 180 days details

References

1 reference

URL	Tags
https://publisher.hitachienergy.com/preview?Docum…	vendor-advisory

Impacted products

2 products

Vendor	Product	Version
Hitachi Energy	TRO600	Affected: 9.1.0.0 , ≤ 9.2.0.0 (custom)
hitachi_energy	tro600	Affected: 9.1.0.0 , ≤ 9.2.0.0 (custom) cpe:2.3:a:hitachi_energy:tro600::::::::

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "affected": [
          {
            "cpes": [
              "cpe:2.3:a:hitachi_energy:tro600:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "tro600",
            "vendor": "hitachi_energy",
            "versions": [
              {
                "lessThanOrEqual": "9.2.0.0",
                "status": "affected",
                "version": "9.1.0.0",
                "versionType": "custom"
              }
            ]
          }
        ],
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2024-41153",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-10-29T13:54:05.290769Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-11-04T16:00:52.178Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "TRO600",
          "vendor": "Hitachi Energy",
          "versions": [
            {
              "lessThanOrEqual": "9.2.0.0",
              "status": "affected",
              "version": "9.1.0.0",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "Command injection vulnerability in the Edge Computing UI for the\nTRO600 series radios that allows for the execution of arbitrary system commands. If exploited, an attacker with write access to the\nweb UI can execute commands on the device with root privileges,\nfar more extensive than what the write privilege intends.\n\n\u003cbr\u003e"
            }
          ],
          "value": "Command injection vulnerability in the Edge Computing UI for the\nTRO600 series radios that allows for the execution of arbitrary system commands. If exploited, an attacker with write access to the\nweb UI can execute commands on the device with root privileges,\nfar more extensive than what the write privilege intends."
        }
      ],
      "impacts": [
        {
          "capecId": "CAPEC-248",
          "descriptions": [
            {
              "lang": "en",
              "value": "CAPEC-248 Command Injection"
            }
          ]
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.2,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "HIGH",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-78",
              "description": "CWE-78 Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-10-24T08:38:07.234Z",
        "orgId": "e383dce4-0c27-4495-91c4-0db157728d17",
        "shortName": "Hitachi Energy"
      },
      "references": [
        {
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://publisher.hitachienergy.com/preview?DocumentID=8DBD000147\u0026LanguageCode=en\u0026DocumentPartId=\u0026Action=launch"
        }
      ],
      "source": {
        "discovery": "UNKNOWN"
      },
      "x_generator": {
        "engine": "Vulnogram 0.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "e383dce4-0c27-4495-91c4-0db157728d17",
    "assignerShortName": "Hitachi Energy",
    "cveId": "CVE-2024-41153",
    "datePublished": "2024-10-29T12:30:31.402Z",
    "dateReserved": "2024-07-16T16:02:30.295Z",
    "dateUpdated": "2025-11-04T16:00:52.178Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2024-28024 (GCVE-0-2024-28024)

Vulnerability from nvd – Published: 2024-06-11 18:17 – Updated: 2024-10-29 14:42

Summary

A vulnerability exists in the FOXMAN-UN/UNEM in which sensitive information is stored in cleartext within a resource that might be accessible to another control sphere.

Severity

4.1 (Medium)


                        
                          CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:N

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2024-06-11 20:22 UTC

CWE

CWE-312 - Cleartext Storage of Sensitive Information

Assigner

Hitachi Energy CNA

CNA scorecard C 68/100 over 12 records in the last 180 days details

References

2 references

URL	Tags
https://publisher.hitachienergy.com/preview?Docum…
https://publisher.hitachienergy.com/preview?Docum…

Impacted products

4 products

Vendor	Product	Version
Hitachi Energy	FOXMAN-UN	Affected: FOXMAN-UN R16B Affected: FOXMAN-UN R15B Affected: FOXMAN-UN R16A Affected: FOXMAN-UN R15A
Hitachi Energy	UNEM	Affected: UNEM R16B Affected: UNEM R15B Affected: UNEM R16A Affected: UNEM R15A
hitachi_energy	foxman-un	Affected: FOXMAN-UN R16B Affected: FOXMAN-UN R15B Affected: FOXMAN-UN R16A Affected: FOXMAN-UN R15A cpe:2.3:a:hitachi_energy:foxman-un::::::::
hitachi_energy	unem	Affected: UNEM R16B Affected: UNEM R15B Affected: UNEM R16A Affected: UNEM R15A cpe:2.3:a:hitachi_energy:unem::::::::

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "affected": [
          {
            "cpes": [
              "cpe:2.3:a:hitachi_energy:foxman-un:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unaffected",
            "product": "foxman-un",
            "vendor": "hitachi_energy",
            "versions": [
              {
                "status": "affected",
                "version": "FOXMAN-UN R16B"
              },
              {
                "status": "affected",
                "version": "FOXMAN-UN R15B"
              },
              {
                "status": "affected",
                "version": "FOXMAN-UN R16A"
              },
              {
                "status": "affected",
                "version": "FOXMAN-UN R15A"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:a:hitachi_energy:unem:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unaffected",
            "product": "unem",
            "vendor": "hitachi_energy",
            "versions": [
              {
                "status": "affected",
                "version": "UNEM R16B"
              },
              {
                "status": "affected",
                "version": "UNEM R15B"
              },
              {
                "status": "affected",
                "version": "UNEM R16A"
              },
              {
                "status": "affected",
                "version": "UNEM R15A"
              }
            ]
          }
        ],
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2024-28024",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-06-11T20:22:36.317764Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-06-11T20:39:33.569Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-02T00:48:47.698Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://publisher.hitachienergy.com/preview?DocumentId=8DBD000201\u0026languageCode=en\u0026Preview=true"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://publisher.hitachienergy.com/preview?DocumentId=8DBD000194\u0026languageCode=en\u0026Preview=true"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "FOXMAN-UN",
          "vendor": "Hitachi Energy",
          "versions": [
            {
              "status": "affected",
              "version": "FOXMAN-UN R16B"
            },
            {
              "status": "affected",
              "version": "FOXMAN-UN R15B"
            },
            {
              "status": "affected",
              "version": "FOXMAN-UN R16A"
            },
            {
              "status": "affected",
              "version": "FOXMAN-UN R15A"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "UNEM",
          "vendor": "Hitachi Energy",
          "versions": [
            {
              "status": "affected",
              "version": "UNEM R16B"
            },
            {
              "status": "affected",
              "version": "UNEM R15B"
            },
            {
              "status": "affected",
              "version": "UNEM R16A"
            },
            {
              "status": "affected",
              "version": "UNEM R15A"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "A vulnerability exists in the FOXMAN-UN/UNEM in which sensitive information is \nstored in cleartext within a resource that might be accessible to another control sphere."
            }
          ],
          "value": "A vulnerability exists in the FOXMAN-UN/UNEM in which sensitive information is \nstored in cleartext within a resource that might be accessible to another control sphere."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "HIGH",
            "attackVector": "LOCAL",
            "availabilityImpact": "NONE",
            "baseScore": 4.1,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "HIGH",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-312",
              "description": "CWE-312 Cleartext Storage of Sensitive Information",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2024-10-29T14:42:42.760Z",
        "orgId": "e383dce4-0c27-4495-91c4-0db157728d17",
        "shortName": "Hitachi Energy"
      },
      "references": [
        {
          "url": "https://publisher.hitachienergy.com/preview?DocumentId=8DBD000201\u0026languageCode=en\u0026Preview=true"
        },
        {
          "url": "https://publisher.hitachienergy.com/preview?DocumentId=8DBD000194\u0026languageCode=en\u0026Preview=true"
        }
      ],
      "source": {
        "discovery": "UNKNOWN"
      },
      "x_generator": {
        "engine": "Vulnogram 0.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "e383dce4-0c27-4495-91c4-0db157728d17",
    "assignerShortName": "Hitachi Energy",
    "cveId": "CVE-2024-28024",
    "datePublished": "2024-06-11T18:17:54.877Z",
    "dateReserved": "2024-02-29T13:42:00.746Z",
    "dateUpdated": "2024-10-29T14:42:42.760Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2024-2011 (GCVE-0-2024-2011)

Vulnerability from nvd – Published: 2024-06-11 13:24 – Updated: 2024-08-01 18:56

Summary

A heap-based buffer overflow vulnerability exists in the FOXMAN-UN/UNEM that if exploited will generally lead to a denial of service but can be used to execute arbitrary code, which is usually outside the scope of a program's implicit security policy

Severity

8.6 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H

SSVC

Exploitation: none Automatable: yes Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2024-06-18 19:34 UTC

CWE

CWE-122 - Heap-based Buffer Overflow

Assigner

Hitachi Energy CNA

CNA scorecard C 68/100 over 12 records in the last 180 days details

References

2 references

URL	Tags
https://publisher.hitachienergy.com/preview?Docum…
https://publisher.hitachienergy.com/preview?Docum…

Impacted products

4 products

Vendor	Product	Version
Hitachi Energy	FOXMAN-UN	Affected: FOXMAN-UN R16B PC2 (custom) Unaffected: FOXMAN-UN R16B PC3 , ≤ FOXMAN-UN R16B PC4 (custom) Affected: FOXMAN-UN R15B PC4 (custom) Unaffected: FOXMAN-UN R16B PC5 (custom) Affected: FOXMAN-UN R16A Affected: FOXMAN-UN R15A
Hitachi Energy	UNEM	Affected: UNEM R16B PC2 (custom) Unaffected: UNEM R16B PC3 , ≤ UNEM R16B PC4 (custom) Affected: UNEM R15B PC4 (custom) Unaffected: UNEM R16B PC5 (custom) Affected: UNEM R16A Affected: UNEM R15A
hitachi_energy	foxman-un	Affected: FOXMAN-UN R16B PC2 Unaffected: FOXMAN-UN R16B PC3 , ≤ FOXMAN-UN R16B PC4 (custom) Affected: FOXMAN-UN R15B PC4 Unaffected: FOXMAN-UN R16B PC5 Affected: FOXMAN-UN R16A Affected: FOXMAN-UN R15A cpe:2.3:a:hitachi_energy:foxman-un::::::::
hitachi_energy	unem	Affected: UNEM R16B PC2 Unaffected: UNEM R16B PC3 , ≤ UNEM R16B PC4 (custom) Affected: UNEM R15B PC4 Unaffected: UNEM R16B PC5 Affected: UNEM R16A Affected: UNEM R15A cpe:2.3:a:hitachi_energy:unem::::::::

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "affected": [
          {
            "cpes": [
              "cpe:2.3:a:hitachi_energy:foxman-un:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unaffected",
            "product": "foxman-un",
            "vendor": "hitachi_energy",
            "versions": [
              {
                "status": "affected",
                "version": "FOXMAN-UN R16B PC2"
              },
              {
                "lessThanOrEqual": "FOXMAN-UN R16B PC4",
                "status": "unaffected",
                "version": "FOXMAN-UN R16B PC3",
                "versionType": "custom"
              },
              {
                "status": "affected",
                "version": "FOXMAN-UN R15B PC4"
              },
              {
                "status": "unaffected",
                "version": "FOXMAN-UN R16B PC5"
              },
              {
                "status": "affected",
                "version": "FOXMAN-UN R16A"
              },
              {
                "status": "affected",
                "version": "FOXMAN-UN R15A"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:a:hitachi_energy:unem:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unaffected",
            "product": "unem",
            "vendor": "hitachi_energy",
            "versions": [
              {
                "status": "affected",
                "version": "UNEM R16B PC2"
              },
              {
                "lessThanOrEqual": "UNEM R16B PC4",
                "status": "unaffected",
                "version": "UNEM R16B PC3",
                "versionType": "custom"
              },
              {
                "status": "affected",
                "version": "UNEM R15B PC4"
              },
              {
                "status": "unaffected",
                "version": "UNEM R16B PC5"
              },
              {
                "status": "affected",
                "version": "UNEM R16A"
              },
              {
                "status": "affected",
                "version": "UNEM R15A"
              }
            ]
          }
        ],
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2024-2011",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-06-18T19:34:01.919299Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-06-18T19:57:39.468Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-01T18:56:22.675Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://publisher.hitachienergy.com/preview?DocumentId=8DBD000201\u0026languageCode=en\u0026Preview=true"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://publisher.hitachienergy.com/preview?DocumentId=8DBD000194\u0026languageCode=en\u0026Preview=true"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "FOXMAN-UN",
          "vendor": "Hitachi Energy",
          "versions": [
            {
              "status": "affected",
              "version": "FOXMAN-UN R16B PC2",
              "versionType": "custom"
            },
            {
              "lessThanOrEqual": "FOXMAN-UN R16B PC4",
              "status": "unaffected",
              "version": "FOXMAN-UN R16B PC3",
              "versionType": "custom"
            },
            {
              "status": "affected",
              "version": "FOXMAN-UN R15B PC4",
              "versionType": "custom"
            },
            {
              "status": "unaffected",
              "version": "FOXMAN-UN R16B PC5",
              "versionType": "custom"
            },
            {
              "status": "affected",
              "version": "FOXMAN-UN R16A"
            },
            {
              "status": "affected",
              "version": "FOXMAN-UN R15A"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "UNEM",
          "vendor": "Hitachi Energy",
          "versions": [
            {
              "status": "affected",
              "version": "UNEM R16B PC2",
              "versionType": "custom"
            },
            {
              "lessThanOrEqual": "UNEM R16B PC4",
              "status": "unaffected",
              "version": "UNEM R16B PC3",
              "versionType": "custom"
            },
            {
              "status": "affected",
              "version": "UNEM R15B PC4",
              "versionType": "custom"
            },
            {
              "status": "unaffected",
              "version": "UNEM R16B PC5",
              "versionType": "custom"
            },
            {
              "status": "affected",
              "version": "UNEM R16A"
            },
            {
              "status": "affected",
              "version": "UNEM R15A"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "A heap-based buffer overflow vulnerability exists in the FOXMAN-UN/UNEM that\nif exploited will generally lead to a denial of service but can be used \nto execute arbitrary code, which is usually outside the scope of a\nprogram\u0027s implicit security policy"
            }
          ],
          "value": "A heap-based buffer overflow vulnerability exists in the FOXMAN-UN/UNEM that\nif exploited will generally lead to a denial of service but can be used \nto execute arbitrary code, which is usually outside the scope of a\nprogram\u0027s implicit security policy"
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.6,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "LOW",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-122",
              "description": "CWE-122 Heap-based Buffer Overflow",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2024-06-11T13:59:18.165Z",
        "orgId": "e383dce4-0c27-4495-91c4-0db157728d17",
        "shortName": "Hitachi Energy"
      },
      "references": [
        {
          "url": "https://publisher.hitachienergy.com/preview?DocumentId=8DBD000201\u0026languageCode=en\u0026Preview=true"
        },
        {
          "url": "https://publisher.hitachienergy.com/preview?DocumentId=8DBD000194\u0026languageCode=en\u0026Preview=true"
        }
      ],
      "source": {
        "discovery": "UNKNOWN"
      },
      "x_generator": {
        "engine": "Vulnogram 0.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "e383dce4-0c27-4495-91c4-0db157728d17",
    "assignerShortName": "Hitachi Energy",
    "cveId": "CVE-2024-2011",
    "datePublished": "2024-06-11T13:24:58.764Z",
    "dateReserved": "2024-02-29T13:42:05.971Z",
    "dateUpdated": "2024-08-01T18:56:22.675Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2024-2462 (GCVE-0-2024-2462)

Vulnerability from nvd – Published: 2024-06-11 12:48 – Updated: 2024-08-01 19:11

Summary

Allow attackers to intercept or falsify data exchanges between the client and the server

Severity

6.8 (Medium)


                        
                          CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:A/VC:L/VI:N/VA:H/SC:L/SI:N/SA:H

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2024-06-12 18:31 UTC

CWE

CWE-297 - Improper Validation of Certificate with Host Mismatch

Assigner

Hitachi Energy CNA

CNA scorecard C 68/100 over 12 records in the last 180 days details

References

1 reference

URL	Tags
https://publisher.hitachienergy.com/preview?Docum…

Impacted products

12 products

Vendor	Product	Version
Hitachi Energy	FOXMAN-UN	Affected: 0 , ≤ FOXMAN-UN R16B PC2 (custom) Unaffected: FOXMAN-UN R16B PC3 (custom) Affected: 0 , ≤ FOXMAN-UN R15B PC4 (custom) Unaffected: FOXMAN-UN R15B PC5 (custom) Affected: FOXMAN-UN R16A (custom) Affected: FOXMAN-UN R15A (custom)
Hitachi Energy	FOX61x	Affected: 0 , < FOX61x R16B (custom) Unaffected: FOX61x R16B (custom)
Hitachi Energy	FOXCST	Affected: 0 , < FOXCST_16.2.1 (custom) Unaffected: FOXCST_16.2.1 (custom)
Hitachi Energy	UNEM	Affected: 0 , ≤ UNEM R16B PC2 (custom) Unaffected: UNEM R16B PC3 (custom) Affected: 0 , ≤ UNEM R15B PC4 (custom) Unaffected: UNEM R15B PC5 (custom) Affected: UNEM R16A (custom) Affected: UNEM R15A (custom)
Hitachi Energy	XMC20	Affected: R16B (custom)
Hitachi Energy	ECST	Affected: ECST_16.2.1 (custom)
hitachi_energy	foxman-un	Affected: 0 , ≤ FOXMAN-UN R16B PC2 (custom) Unaffected: FOXMAN-UN R16B PC3 Affected: 0 , ≤ FOXMAN-UN R15B PC4 (custom) Unaffected: FOXMAN-UN R15B PC5 Affected: FOXMAN-UN R16A Affected: FOXMAN-UN R15A cpe:2.3:a:hitachi_energy:foxman-un::::::::
hitachi_energy	fox61x	Affected: 0 , < FOX61x R16B (custom) Unaffected: FOX61x R16B cpe:2.3:a:hitachi_energy:fox61x::::::::
hitachi_energy	foxcst	Affected: 0 , < FOXCST_16.2.1 (custom) Unaffected: FOXCST_16.2.1 cpe:2.3:a:hitachi_energy:foxcst::::::::
hitachi_energy	unem	Affected: 0 , ≤ UNEM R16B PC2 (custom) Unaffected: UNEM R16B PC3 Affected: 0 , ≤ UNEM R15B PC4 (custom) Unaffected: UNEM R15B PC5 Affected: UNEM R16A Affected: UNEM R15A cpe:2.3:a:hitachi_energy:unem::::::::
hitachi_energy	xmc20	Affected: R16B cpe:2.3:a:hitachi_energy:xmc20::::::::
hitachi_energy	ecst	Affected: ECST_16.2.1 cpe:2.3:a:hitachi_energy:ecst::::::::

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "affected": [
          {
            "cpes": [
              "cpe:2.3:a:hitachi_energy:foxman-un:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unaffected",
            "product": "foxman-un",
            "vendor": "hitachi_energy",
            "versions": [
              {
                "lessThanOrEqual": "FOXMAN-UN R16B PC2",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              },
              {
                "status": "unaffected",
                "version": "FOXMAN-UN R16B PC3"
              },
              {
                "lessThanOrEqual": "FOXMAN-UN R15B PC4",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              },
              {
                "status": "unaffected",
                "version": "FOXMAN-UN R15B PC5"
              },
              {
                "status": "affected",
                "version": "FOXMAN-UN R16A"
              },
              {
                "status": "affected",
                "version": "FOXMAN-UN R15A"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:a:hitachi_energy:fox61x:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unaffected",
            "product": "fox61x",
            "vendor": "hitachi_energy",
            "versions": [
              {
                "lessThan": "FOX61x R16B",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              },
              {
                "status": "unaffected",
                "version": "FOX61x R16B"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:a:hitachi_energy:foxcst:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unaffected",
            "product": "foxcst",
            "vendor": "hitachi_energy",
            "versions": [
              {
                "lessThan": "FOXCST_16.2.1",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              },
              {
                "status": "unaffected",
                "version": "FOXCST_16.2.1"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:a:hitachi_energy:unem:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unaffected",
            "product": "unem",
            "vendor": "hitachi_energy",
            "versions": [
              {
                "lessThanOrEqual": "UNEM R16B PC2",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              },
              {
                "status": "unaffected",
                "version": "UNEM R16B PC3"
              },
              {
                "lessThanOrEqual": "UNEM R15B PC4",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              },
              {
                "status": "unaffected",
                "version": "UNEM R15B PC5"
              },
              {
                "status": "affected",
                "version": "UNEM R16A"
              },
              {
                "status": "affected",
                "version": "UNEM R15A"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:a:hitachi_energy:xmc20:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unaffected",
            "product": "xmc20",
            "vendor": "hitachi_energy",
            "versions": [
              {
                "status": "affected",
                "version": "R16B"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:a:hitachi_energy:ecst:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unaffected",
            "product": "ecst",
            "vendor": "hitachi_energy",
            "versions": [
              {
                "status": "affected",
                "version": "ECST_16.2.1"
              }
            ]
          }
        ],
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2024-2462",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-06-12T18:31:01.584910Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-06-12T19:06:16.825Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-01T19:11:53.576Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://publisher.hitachienergy.com/preview?DocumentId=8DBD000198\u0026languageCode=en\u0026Preview=true"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "FOXMAN-UN",
          "vendor": "Hitachi Energy",
          "versions": [
            {
              "lessThanOrEqual": "FOXMAN-UN R16B PC2",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            },
            {
              "status": "unaffected",
              "version": "FOXMAN-UN R16B PC3",
              "versionType": "custom"
            },
            {
              "lessThanOrEqual": "FOXMAN-UN R15B PC4",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            },
            {
              "status": "unaffected",
              "version": "FOXMAN-UN R15B PC5",
              "versionType": "custom"
            },
            {
              "status": "affected",
              "version": "FOXMAN-UN R16A",
              "versionType": "custom"
            },
            {
              "status": "affected",
              "version": "FOXMAN-UN R15A",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "FOX61x",
          "vendor": "Hitachi Energy",
          "versions": [
            {
              "lessThan": "FOX61x R16B",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            },
            {
              "status": "unaffected",
              "version": "FOX61x R16B",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "FOXCST",
          "vendor": "Hitachi Energy",
          "versions": [
            {
              "lessThan": "FOXCST_16.2.1",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            },
            {
              "status": "unaffected",
              "version": "FOXCST_16.2.1",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "UNEM",
          "vendor": "Hitachi Energy",
          "versions": [
            {
              "lessThanOrEqual": "UNEM R16B PC2",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            },
            {
              "status": "unaffected",
              "version": "UNEM R16B PC3",
              "versionType": "custom"
            },
            {
              "lessThanOrEqual": "UNEM R15B PC4",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            },
            {
              "status": "unaffected",
              "version": "UNEM R15B PC5",
              "versionType": "custom"
            },
            {
              "status": "affected",
              "version": "UNEM R16A",
              "versionType": "custom"
            },
            {
              "status": "affected",
              "version": "UNEM R15A",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "XMC20",
          "vendor": "Hitachi Energy",
          "versions": [
            {
              "status": "affected",
              "version": "R16B",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "ECST",
          "vendor": "Hitachi Energy",
          "versions": [
            {
              "status": "affected",
              "version": "ECST_16.2.1",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "Allow attackers to intercept or falsify data exchanges between the client \nand the server\n\n"
            }
          ],
          "value": "Allow attackers to intercept or falsify data exchanges between the client \nand the server"
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "Automatable": "NOT_DEFINED",
            "Recovery": "NOT_DEFINED",
            "Safety": "NOT_DEFINED",
            "attackComplexity": "LOW",
            "attackRequirements": "NONE",
            "attackVector": "PHYSICAL",
            "baseScore": 6.8,
            "baseSeverity": "MEDIUM",
            "privilegesRequired": "NONE",
            "providerUrgency": "NOT_DEFINED",
            "subAvailabilityImpact": "HIGH",
            "subConfidentialityImpact": "LOW",
            "subIntegrityImpact": "NONE",
            "userInteraction": "ACTIVE",
            "valueDensity": "NOT_DEFINED",
            "vectorString": "CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:A/VC:L/VI:N/VA:H/SC:L/SI:N/SA:H",
            "version": "4.0",
            "vulnAvailabilityImpact": "HIGH",
            "vulnConfidentialityImpact": "LOW",
            "vulnIntegrityImpact": "NONE",
            "vulnerabilityResponseEffort": "NOT_DEFINED"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-297",
              "description": "CWE-297 Improper Validation of Certificate with Host Mismatch",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2024-06-11T12:48:57.963Z",
        "orgId": "e383dce4-0c27-4495-91c4-0db157728d17",
        "shortName": "Hitachi Energy"
      },
      "references": [
        {
          "url": "https://publisher.hitachienergy.com/preview?DocumentId=8DBD000198\u0026languageCode=en\u0026Preview=true"
        }
      ],
      "source": {
        "discovery": "UNKNOWN"
      },
      "x_generator": {
        "engine": "Vulnogram 0.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "e383dce4-0c27-4495-91c4-0db157728d17",
    "assignerShortName": "Hitachi Energy",
    "cveId": "CVE-2024-2462",
    "datePublished": "2024-06-11T12:48:57.963Z",
    "dateReserved": "2024-03-14T17:09:59.755Z",
    "dateUpdated": "2024-08-01T19:11:53.576Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2024-0400 (GCVE-0-2024-0400)

Vulnerability from nvd – Published: 2024-03-27 02:03 – Updated: 2025-10-16 08:07

Summary

SCM Software is a client and server application. An Authenticated System manager client can execute LINQ query in the SCM server, for customized filtering. An Authenticated malicious client can send a specially crafted code to skip the validation and execute arbitrary code (RCE) on the SCM Server remotely. Malicious clients can execute any command by using this RCE vulnerability.

Severity

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

SSVC

Exploitation: none Automatable: no Technical Impact: total

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2024-08-06 18:54 UTC

CWE

CWE-94 - Improper Control of Generation of Code ('Code Injection')

Assigner

Hitachi Energy CNA

CNA scorecard C 68/100 over 12 records in the last 180 days details

References

1 reference

URL	Tags
https://publisher.hitachienergy.com/preview?Docum…

Impacted products

2 products

Vendor	Product	Version
Hitachi Energy	MACH SCM	Affected: 4.0 , ≤ 4.38 (custom)
hitachi_energy	mach_scm	Affected: 4.0 , ≤ 4.38 (custom) cpe:2.3:a:hitachi_energy:mach_scm::::::::

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-01T18:04:49.537Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://publisher.hitachienergy.com/preview?DocumentId=8DBD000189\u0026languageCode=en\u0026Preview=true"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "affected": [
          {
            "cpes": [
              "cpe:2.3:a:hitachi_energy:mach_scm:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "mach_scm",
            "vendor": "hitachi_energy",
            "versions": [
              {
                "lessThanOrEqual": "4.38",
                "status": "affected",
                "version": "4.0",
                "versionType": "custom"
              }
            ]
          }
        ],
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2024-0400",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-08-06T18:54:08.600663Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-08-06T19:00:32.693Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "MACH SCM",
          "vendor": "Hitachi Energy",
          "versions": [
            {
              "lessThanOrEqual": "4.38",
              "status": "affected",
              "version": "4.0",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "SCM Software is a client and server application. An Authenticated System manager client can execute LINQ query in the SCM server, for customized filtering. An Authenticated malicious client can send a specially crafted code to skip the validation and execute arbitrary code (RCE) on the SCM Server remotely. Malicious clients can execute any command by using this RCE vulnerability."
            }
          ],
          "value": "SCM Software is a client and server application. An Authenticated System manager client can execute LINQ query in the SCM server, for customized filtering. An Authenticated malicious client can send a specially crafted code to skip the validation and execute arbitrary code (RCE) on the SCM Server remotely. Malicious clients can execute any command by using this RCE vulnerability."
        }
      ],
      "impacts": [
        {
          "capecId": "CAPEC-551",
          "descriptions": [
            {
              "lang": "en",
              "value": "CAPEC-551 Modify Existing Service"
            }
          ]
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-94",
              "description": "CWE-94 Improper Control of Generation of Code (\u0027Code Injection\u0027)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-10-16T08:07:33.107Z",
        "orgId": "e383dce4-0c27-4495-91c4-0db157728d17",
        "shortName": "Hitachi Energy"
      },
      "references": [
        {
          "url": "https://publisher.hitachienergy.com/preview?DocumentId=8DBD000189\u0026languageCode=en\u0026Preview=true"
        }
      ],
      "source": {
        "discovery": "UNKNOWN"
      },
      "x_generator": {
        "engine": "Vulnogram 0.1.0-dev"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "e383dce4-0c27-4495-91c4-0db157728d17",
    "assignerShortName": "Hitachi Energy",
    "cveId": "CVE-2024-0400",
    "datePublished": "2024-03-27T02:03:57.253Z",
    "dateReserved": "2024-01-10T15:23:18.527Z",
    "dateUpdated": "2025-10-16T08:07:33.107Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2024-41153 (GCVE-0-2024-41153)

Vulnerability from cvelistv5 – Published: 2024-10-29 12:30 – Updated: 2025-11-04 16:00

Summary

Command injection vulnerability in the Edge Computing UI for the TRO600 series radios that allows for the execution of arbitrary system commands. If exploited, an attacker with write access to the web UI can execute commands on the device with root privileges, far more extensive than what the write privilege intends.

Severity

7.2 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

SSVC

Exploitation: none Automatable: no Technical Impact: total

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2024-10-29 13:54 UTC

CWE

CWE-78 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

Assigner

Hitachi Energy CNA

CNA scorecard C 68/100 over 12 records in the last 180 days details

References

1 reference

URL	Tags
https://publisher.hitachienergy.com/preview?Docum…	vendor-advisory

Impacted products

2 products

Vendor	Product	Version
Hitachi Energy	TRO600	Affected: 9.1.0.0 , ≤ 9.2.0.0 (custom)
hitachi_energy	tro600	Affected: 9.1.0.0 , ≤ 9.2.0.0 (custom) cpe:2.3:a:hitachi_energy:tro600::::::::

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "affected": [
          {
            "cpes": [
              "cpe:2.3:a:hitachi_energy:tro600:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "tro600",
            "vendor": "hitachi_energy",
            "versions": [
              {
                "lessThanOrEqual": "9.2.0.0",
                "status": "affected",
                "version": "9.1.0.0",
                "versionType": "custom"
              }
            ]
          }
        ],
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2024-41153",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-10-29T13:54:05.290769Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-11-04T16:00:52.178Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "TRO600",
          "vendor": "Hitachi Energy",
          "versions": [
            {
              "lessThanOrEqual": "9.2.0.0",
              "status": "affected",
              "version": "9.1.0.0",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "Command injection vulnerability in the Edge Computing UI for the\nTRO600 series radios that allows for the execution of arbitrary system commands. If exploited, an attacker with write access to the\nweb UI can execute commands on the device with root privileges,\nfar more extensive than what the write privilege intends.\n\n\u003cbr\u003e"
            }
          ],
          "value": "Command injection vulnerability in the Edge Computing UI for the\nTRO600 series radios that allows for the execution of arbitrary system commands. If exploited, an attacker with write access to the\nweb UI can execute commands on the device with root privileges,\nfar more extensive than what the write privilege intends."
        }
      ],
      "impacts": [
        {
          "capecId": "CAPEC-248",
          "descriptions": [
            {
              "lang": "en",
              "value": "CAPEC-248 Command Injection"
            }
          ]
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.2,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "HIGH",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-78",
              "description": "CWE-78 Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-10-24T08:38:07.234Z",
        "orgId": "e383dce4-0c27-4495-91c4-0db157728d17",
        "shortName": "Hitachi Energy"
      },
      "references": [
        {
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://publisher.hitachienergy.com/preview?DocumentID=8DBD000147\u0026LanguageCode=en\u0026DocumentPartId=\u0026Action=launch"
        }
      ],
      "source": {
        "discovery": "UNKNOWN"
      },
      "x_generator": {
        "engine": "Vulnogram 0.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "e383dce4-0c27-4495-91c4-0db157728d17",
    "assignerShortName": "Hitachi Energy",
    "cveId": "CVE-2024-41153",
    "datePublished": "2024-10-29T12:30:31.402Z",
    "dateReserved": "2024-07-16T16:02:30.295Z",
    "dateUpdated": "2025-11-04T16:00:52.178Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2024-28024 (GCVE-0-2024-28024)

Vulnerability from cvelistv5 – Published: 2024-06-11 18:17 – Updated: 2024-10-29 14:42

Summary

A vulnerability exists in the FOXMAN-UN/UNEM in which sensitive information is stored in cleartext within a resource that might be accessible to another control sphere.

Severity

4.1 (Medium)


                        
                          CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:N

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2024-06-11 20:22 UTC

CWE

CWE-312 - Cleartext Storage of Sensitive Information

Assigner

Hitachi Energy CNA

CNA scorecard C 68/100 over 12 records in the last 180 days details

References

2 references

URL	Tags
https://publisher.hitachienergy.com/preview?Docum…
https://publisher.hitachienergy.com/preview?Docum…

Impacted products

4 products

Vendor	Product	Version
Hitachi Energy	FOXMAN-UN	Affected: FOXMAN-UN R16B Affected: FOXMAN-UN R15B Affected: FOXMAN-UN R16A Affected: FOXMAN-UN R15A
Hitachi Energy	UNEM	Affected: UNEM R16B Affected: UNEM R15B Affected: UNEM R16A Affected: UNEM R15A
hitachi_energy	foxman-un	Affected: FOXMAN-UN R16B Affected: FOXMAN-UN R15B Affected: FOXMAN-UN R16A Affected: FOXMAN-UN R15A cpe:2.3:a:hitachi_energy:foxman-un::::::::
hitachi_energy	unem	Affected: UNEM R16B Affected: UNEM R15B Affected: UNEM R16A Affected: UNEM R15A cpe:2.3:a:hitachi_energy:unem::::::::

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "affected": [
          {
            "cpes": [
              "cpe:2.3:a:hitachi_energy:foxman-un:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unaffected",
            "product": "foxman-un",
            "vendor": "hitachi_energy",
            "versions": [
              {
                "status": "affected",
                "version": "FOXMAN-UN R16B"
              },
              {
                "status": "affected",
                "version": "FOXMAN-UN R15B"
              },
              {
                "status": "affected",
                "version": "FOXMAN-UN R16A"
              },
              {
                "status": "affected",
                "version": "FOXMAN-UN R15A"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:a:hitachi_energy:unem:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unaffected",
            "product": "unem",
            "vendor": "hitachi_energy",
            "versions": [
              {
                "status": "affected",
                "version": "UNEM R16B"
              },
              {
                "status": "affected",
                "version": "UNEM R15B"
              },
              {
                "status": "affected",
                "version": "UNEM R16A"
              },
              {
                "status": "affected",
                "version": "UNEM R15A"
              }
            ]
          }
        ],
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2024-28024",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-06-11T20:22:36.317764Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-06-11T20:39:33.569Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-02T00:48:47.698Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://publisher.hitachienergy.com/preview?DocumentId=8DBD000201\u0026languageCode=en\u0026Preview=true"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://publisher.hitachienergy.com/preview?DocumentId=8DBD000194\u0026languageCode=en\u0026Preview=true"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "FOXMAN-UN",
          "vendor": "Hitachi Energy",
          "versions": [
            {
              "status": "affected",
              "version": "FOXMAN-UN R16B"
            },
            {
              "status": "affected",
              "version": "FOXMAN-UN R15B"
            },
            {
              "status": "affected",
              "version": "FOXMAN-UN R16A"
            },
            {
              "status": "affected",
              "version": "FOXMAN-UN R15A"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "UNEM",
          "vendor": "Hitachi Energy",
          "versions": [
            {
              "status": "affected",
              "version": "UNEM R16B"
            },
            {
              "status": "affected",
              "version": "UNEM R15B"
            },
            {
              "status": "affected",
              "version": "UNEM R16A"
            },
            {
              "status": "affected",
              "version": "UNEM R15A"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "A vulnerability exists in the FOXMAN-UN/UNEM in which sensitive information is \nstored in cleartext within a resource that might be accessible to another control sphere."
            }
          ],
          "value": "A vulnerability exists in the FOXMAN-UN/UNEM in which sensitive information is \nstored in cleartext within a resource that might be accessible to another control sphere."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "HIGH",
            "attackVector": "LOCAL",
            "availabilityImpact": "NONE",
            "baseScore": 4.1,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "HIGH",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-312",
              "description": "CWE-312 Cleartext Storage of Sensitive Information",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2024-10-29T14:42:42.760Z",
        "orgId": "e383dce4-0c27-4495-91c4-0db157728d17",
        "shortName": "Hitachi Energy"
      },
      "references": [
        {
          "url": "https://publisher.hitachienergy.com/preview?DocumentId=8DBD000201\u0026languageCode=en\u0026Preview=true"
        },
        {
          "url": "https://publisher.hitachienergy.com/preview?DocumentId=8DBD000194\u0026languageCode=en\u0026Preview=true"
        }
      ],
      "source": {
        "discovery": "UNKNOWN"
      },
      "x_generator": {
        "engine": "Vulnogram 0.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "e383dce4-0c27-4495-91c4-0db157728d17",
    "assignerShortName": "Hitachi Energy",
    "cveId": "CVE-2024-28024",
    "datePublished": "2024-06-11T18:17:54.877Z",
    "dateReserved": "2024-02-29T13:42:00.746Z",
    "dateUpdated": "2024-10-29T14:42:42.760Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2024-2011 (GCVE-0-2024-2011)

Vulnerability from cvelistv5 – Published: 2024-06-11 13:24 – Updated: 2024-08-01 18:56

Summary

A heap-based buffer overflow vulnerability exists in the FOXMAN-UN/UNEM that if exploited will generally lead to a denial of service but can be used to execute arbitrary code, which is usually outside the scope of a program's implicit security policy

Severity

8.6 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H

SSVC

Exploitation: none Automatable: yes Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2024-06-18 19:34 UTC

CWE

CWE-122 - Heap-based Buffer Overflow

Assigner

Hitachi Energy CNA

CNA scorecard C 68/100 over 12 records in the last 180 days details

References

2 references

URL	Tags
https://publisher.hitachienergy.com/preview?Docum…
https://publisher.hitachienergy.com/preview?Docum…

Impacted products

4 products

Vendor	Product	Version
Hitachi Energy	FOXMAN-UN	Affected: FOXMAN-UN R16B PC2 (custom) Unaffected: FOXMAN-UN R16B PC3 , ≤ FOXMAN-UN R16B PC4 (custom) Affected: FOXMAN-UN R15B PC4 (custom) Unaffected: FOXMAN-UN R16B PC5 (custom) Affected: FOXMAN-UN R16A Affected: FOXMAN-UN R15A
Hitachi Energy	UNEM	Affected: UNEM R16B PC2 (custom) Unaffected: UNEM R16B PC3 , ≤ UNEM R16B PC4 (custom) Affected: UNEM R15B PC4 (custom) Unaffected: UNEM R16B PC5 (custom) Affected: UNEM R16A Affected: UNEM R15A
hitachi_energy	foxman-un	Affected: FOXMAN-UN R16B PC2 Unaffected: FOXMAN-UN R16B PC3 , ≤ FOXMAN-UN R16B PC4 (custom) Affected: FOXMAN-UN R15B PC4 Unaffected: FOXMAN-UN R16B PC5 Affected: FOXMAN-UN R16A Affected: FOXMAN-UN R15A cpe:2.3:a:hitachi_energy:foxman-un::::::::
hitachi_energy	unem	Affected: UNEM R16B PC2 Unaffected: UNEM R16B PC3 , ≤ UNEM R16B PC4 (custom) Affected: UNEM R15B PC4 Unaffected: UNEM R16B PC5 Affected: UNEM R16A Affected: UNEM R15A cpe:2.3:a:hitachi_energy:unem::::::::

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "affected": [
          {
            "cpes": [
              "cpe:2.3:a:hitachi_energy:foxman-un:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unaffected",
            "product": "foxman-un",
            "vendor": "hitachi_energy",
            "versions": [
              {
                "status": "affected",
                "version": "FOXMAN-UN R16B PC2"
              },
              {
                "lessThanOrEqual": "FOXMAN-UN R16B PC4",
                "status": "unaffected",
                "version": "FOXMAN-UN R16B PC3",
                "versionType": "custom"
              },
              {
                "status": "affected",
                "version": "FOXMAN-UN R15B PC4"
              },
              {
                "status": "unaffected",
                "version": "FOXMAN-UN R16B PC5"
              },
              {
                "status": "affected",
                "version": "FOXMAN-UN R16A"
              },
              {
                "status": "affected",
                "version": "FOXMAN-UN R15A"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:a:hitachi_energy:unem:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unaffected",
            "product": "unem",
            "vendor": "hitachi_energy",
            "versions": [
              {
                "status": "affected",
                "version": "UNEM R16B PC2"
              },
              {
                "lessThanOrEqual": "UNEM R16B PC4",
                "status": "unaffected",
                "version": "UNEM R16B PC3",
                "versionType": "custom"
              },
              {
                "status": "affected",
                "version": "UNEM R15B PC4"
              },
              {
                "status": "unaffected",
                "version": "UNEM R16B PC5"
              },
              {
                "status": "affected",
                "version": "UNEM R16A"
              },
              {
                "status": "affected",
                "version": "UNEM R15A"
              }
            ]
          }
        ],
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2024-2011",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-06-18T19:34:01.919299Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-06-18T19:57:39.468Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-01T18:56:22.675Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://publisher.hitachienergy.com/preview?DocumentId=8DBD000201\u0026languageCode=en\u0026Preview=true"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://publisher.hitachienergy.com/preview?DocumentId=8DBD000194\u0026languageCode=en\u0026Preview=true"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "FOXMAN-UN",
          "vendor": "Hitachi Energy",
          "versions": [
            {
              "status": "affected",
              "version": "FOXMAN-UN R16B PC2",
              "versionType": "custom"
            },
            {
              "lessThanOrEqual": "FOXMAN-UN R16B PC4",
              "status": "unaffected",
              "version": "FOXMAN-UN R16B PC3",
              "versionType": "custom"
            },
            {
              "status": "affected",
              "version": "FOXMAN-UN R15B PC4",
              "versionType": "custom"
            },
            {
              "status": "unaffected",
              "version": "FOXMAN-UN R16B PC5",
              "versionType": "custom"
            },
            {
              "status": "affected",
              "version": "FOXMAN-UN R16A"
            },
            {
              "status": "affected",
              "version": "FOXMAN-UN R15A"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "UNEM",
          "vendor": "Hitachi Energy",
          "versions": [
            {
              "status": "affected",
              "version": "UNEM R16B PC2",
              "versionType": "custom"
            },
            {
              "lessThanOrEqual": "UNEM R16B PC4",
              "status": "unaffected",
              "version": "UNEM R16B PC3",
              "versionType": "custom"
            },
            {
              "status": "affected",
              "version": "UNEM R15B PC4",
              "versionType": "custom"
            },
            {
              "status": "unaffected",
              "version": "UNEM R16B PC5",
              "versionType": "custom"
            },
            {
              "status": "affected",
              "version": "UNEM R16A"
            },
            {
              "status": "affected",
              "version": "UNEM R15A"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "A heap-based buffer overflow vulnerability exists in the FOXMAN-UN/UNEM that\nif exploited will generally lead to a denial of service but can be used \nto execute arbitrary code, which is usually outside the scope of a\nprogram\u0027s implicit security policy"
            }
          ],
          "value": "A heap-based buffer overflow vulnerability exists in the FOXMAN-UN/UNEM that\nif exploited will generally lead to a denial of service but can be used \nto execute arbitrary code, which is usually outside the scope of a\nprogram\u0027s implicit security policy"
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.6,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "LOW",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-122",
              "description": "CWE-122 Heap-based Buffer Overflow",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2024-06-11T13:59:18.165Z",
        "orgId": "e383dce4-0c27-4495-91c4-0db157728d17",
        "shortName": "Hitachi Energy"
      },
      "references": [
        {
          "url": "https://publisher.hitachienergy.com/preview?DocumentId=8DBD000201\u0026languageCode=en\u0026Preview=true"
        },
        {
          "url": "https://publisher.hitachienergy.com/preview?DocumentId=8DBD000194\u0026languageCode=en\u0026Preview=true"
        }
      ],
      "source": {
        "discovery": "UNKNOWN"
      },
      "x_generator": {
        "engine": "Vulnogram 0.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "e383dce4-0c27-4495-91c4-0db157728d17",
    "assignerShortName": "Hitachi Energy",
    "cveId": "CVE-2024-2011",
    "datePublished": "2024-06-11T13:24:58.764Z",
    "dateReserved": "2024-02-29T13:42:05.971Z",
    "dateUpdated": "2024-08-01T18:56:22.675Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2024-2462 (GCVE-0-2024-2462)

Vulnerability from cvelistv5 – Published: 2024-06-11 12:48 – Updated: 2024-08-01 19:11

Summary

Allow attackers to intercept or falsify data exchanges between the client and the server

Severity

6.8 (Medium)


                        
                          CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:A/VC:L/VI:N/VA:H/SC:L/SI:N/SA:H

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2024-06-12 18:31 UTC

CWE

CWE-297 - Improper Validation of Certificate with Host Mismatch

Assigner

Hitachi Energy CNA

CNA scorecard C 68/100 over 12 records in the last 180 days details

References

1 reference

URL	Tags
https://publisher.hitachienergy.com/preview?Docum…

Impacted products

12 products

Vendor	Product	Version
Hitachi Energy	FOXMAN-UN	Affected: 0 , ≤ FOXMAN-UN R16B PC2 (custom) Unaffected: FOXMAN-UN R16B PC3 (custom) Affected: 0 , ≤ FOXMAN-UN R15B PC4 (custom) Unaffected: FOXMAN-UN R15B PC5 (custom) Affected: FOXMAN-UN R16A (custom) Affected: FOXMAN-UN R15A (custom)
Hitachi Energy	FOX61x	Affected: 0 , < FOX61x R16B (custom) Unaffected: FOX61x R16B (custom)
Hitachi Energy	FOXCST	Affected: 0 , < FOXCST_16.2.1 (custom) Unaffected: FOXCST_16.2.1 (custom)
Hitachi Energy	UNEM	Affected: 0 , ≤ UNEM R16B PC2 (custom) Unaffected: UNEM R16B PC3 (custom) Affected: 0 , ≤ UNEM R15B PC4 (custom) Unaffected: UNEM R15B PC5 (custom) Affected: UNEM R16A (custom) Affected: UNEM R15A (custom)
Hitachi Energy	XMC20	Affected: R16B (custom)
Hitachi Energy	ECST	Affected: ECST_16.2.1 (custom)
hitachi_energy	foxman-un	Affected: 0 , ≤ FOXMAN-UN R16B PC2 (custom) Unaffected: FOXMAN-UN R16B PC3 Affected: 0 , ≤ FOXMAN-UN R15B PC4 (custom) Unaffected: FOXMAN-UN R15B PC5 Affected: FOXMAN-UN R16A Affected: FOXMAN-UN R15A cpe:2.3:a:hitachi_energy:foxman-un::::::::
hitachi_energy	fox61x	Affected: 0 , < FOX61x R16B (custom) Unaffected: FOX61x R16B cpe:2.3:a:hitachi_energy:fox61x::::::::
hitachi_energy	foxcst	Affected: 0 , < FOXCST_16.2.1 (custom) Unaffected: FOXCST_16.2.1 cpe:2.3:a:hitachi_energy:foxcst::::::::
hitachi_energy	unem	Affected: 0 , ≤ UNEM R16B PC2 (custom) Unaffected: UNEM R16B PC3 Affected: 0 , ≤ UNEM R15B PC4 (custom) Unaffected: UNEM R15B PC5 Affected: UNEM R16A Affected: UNEM R15A cpe:2.3:a:hitachi_energy:unem::::::::
hitachi_energy	xmc20	Affected: R16B cpe:2.3:a:hitachi_energy:xmc20::::::::
hitachi_energy	ecst	Affected: ECST_16.2.1 cpe:2.3:a:hitachi_energy:ecst::::::::

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "affected": [
          {
            "cpes": [
              "cpe:2.3:a:hitachi_energy:foxman-un:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unaffected",
            "product": "foxman-un",
            "vendor": "hitachi_energy",
            "versions": [
              {
                "lessThanOrEqual": "FOXMAN-UN R16B PC2",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              },
              {
                "status": "unaffected",
                "version": "FOXMAN-UN R16B PC3"
              },
              {
                "lessThanOrEqual": "FOXMAN-UN R15B PC4",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              },
              {
                "status": "unaffected",
                "version": "FOXMAN-UN R15B PC5"
              },
              {
                "status": "affected",
                "version": "FOXMAN-UN R16A"
              },
              {
                "status": "affected",
                "version": "FOXMAN-UN R15A"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:a:hitachi_energy:fox61x:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unaffected",
            "product": "fox61x",
            "vendor": "hitachi_energy",
            "versions": [
              {
                "lessThan": "FOX61x R16B",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              },
              {
                "status": "unaffected",
                "version": "FOX61x R16B"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:a:hitachi_energy:foxcst:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unaffected",
            "product": "foxcst",
            "vendor": "hitachi_energy",
            "versions": [
              {
                "lessThan": "FOXCST_16.2.1",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              },
              {
                "status": "unaffected",
                "version": "FOXCST_16.2.1"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:a:hitachi_energy:unem:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unaffected",
            "product": "unem",
            "vendor": "hitachi_energy",
            "versions": [
              {
                "lessThanOrEqual": "UNEM R16B PC2",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              },
              {
                "status": "unaffected",
                "version": "UNEM R16B PC3"
              },
              {
                "lessThanOrEqual": "UNEM R15B PC4",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              },
              {
                "status": "unaffected",
                "version": "UNEM R15B PC5"
              },
              {
                "status": "affected",
                "version": "UNEM R16A"
              },
              {
                "status": "affected",
                "version": "UNEM R15A"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:a:hitachi_energy:xmc20:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unaffected",
            "product": "xmc20",
            "vendor": "hitachi_energy",
            "versions": [
              {
                "status": "affected",
                "version": "R16B"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:a:hitachi_energy:ecst:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unaffected",
            "product": "ecst",
            "vendor": "hitachi_energy",
            "versions": [
              {
                "status": "affected",
                "version": "ECST_16.2.1"
              }
            ]
          }
        ],
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2024-2462",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-06-12T18:31:01.584910Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-06-12T19:06:16.825Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-01T19:11:53.576Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://publisher.hitachienergy.com/preview?DocumentId=8DBD000198\u0026languageCode=en\u0026Preview=true"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "FOXMAN-UN",
          "vendor": "Hitachi Energy",
          "versions": [
            {
              "lessThanOrEqual": "FOXMAN-UN R16B PC2",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            },
            {
              "status": "unaffected",
              "version": "FOXMAN-UN R16B PC3",
              "versionType": "custom"
            },
            {
              "lessThanOrEqual": "FOXMAN-UN R15B PC4",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            },
            {
              "status": "unaffected",
              "version": "FOXMAN-UN R15B PC5",
              "versionType": "custom"
            },
            {
              "status": "affected",
              "version": "FOXMAN-UN R16A",
              "versionType": "custom"
            },
            {
              "status": "affected",
              "version": "FOXMAN-UN R15A",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "FOX61x",
          "vendor": "Hitachi Energy",
          "versions": [
            {
              "lessThan": "FOX61x R16B",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            },
            {
              "status": "unaffected",
              "version": "FOX61x R16B",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "FOXCST",
          "vendor": "Hitachi Energy",
          "versions": [
            {
              "lessThan": "FOXCST_16.2.1",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            },
            {
              "status": "unaffected",
              "version": "FOXCST_16.2.1",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "UNEM",
          "vendor": "Hitachi Energy",
          "versions": [
            {
              "lessThanOrEqual": "UNEM R16B PC2",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            },
            {
              "status": "unaffected",
              "version": "UNEM R16B PC3",
              "versionType": "custom"
            },
            {
              "lessThanOrEqual": "UNEM R15B PC4",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            },
            {
              "status": "unaffected",
              "version": "UNEM R15B PC5",
              "versionType": "custom"
            },
            {
              "status": "affected",
              "version": "UNEM R16A",
              "versionType": "custom"
            },
            {
              "status": "affected",
              "version": "UNEM R15A",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "XMC20",
          "vendor": "Hitachi Energy",
          "versions": [
            {
              "status": "affected",
              "version": "R16B",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "ECST",
          "vendor": "Hitachi Energy",
          "versions": [
            {
              "status": "affected",
              "version": "ECST_16.2.1",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "Allow attackers to intercept or falsify data exchanges between the client \nand the server\n\n"
            }
          ],
          "value": "Allow attackers to intercept or falsify data exchanges between the client \nand the server"
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "Automatable": "NOT_DEFINED",
            "Recovery": "NOT_DEFINED",
            "Safety": "NOT_DEFINED",
            "attackComplexity": "LOW",
            "attackRequirements": "NONE",
            "attackVector": "PHYSICAL",
            "baseScore": 6.8,
            "baseSeverity": "MEDIUM",
            "privilegesRequired": "NONE",
            "providerUrgency": "NOT_DEFINED",
            "subAvailabilityImpact": "HIGH",
            "subConfidentialityImpact": "LOW",
            "subIntegrityImpact": "NONE",
            "userInteraction": "ACTIVE",
            "valueDensity": "NOT_DEFINED",
            "vectorString": "CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:A/VC:L/VI:N/VA:H/SC:L/SI:N/SA:H",
            "version": "4.0",
            "vulnAvailabilityImpact": "HIGH",
            "vulnConfidentialityImpact": "LOW",
            "vulnIntegrityImpact": "NONE",
            "vulnerabilityResponseEffort": "NOT_DEFINED"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-297",
              "description": "CWE-297 Improper Validation of Certificate with Host Mismatch",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2024-06-11T12:48:57.963Z",
        "orgId": "e383dce4-0c27-4495-91c4-0db157728d17",
        "shortName": "Hitachi Energy"
      },
      "references": [
        {
          "url": "https://publisher.hitachienergy.com/preview?DocumentId=8DBD000198\u0026languageCode=en\u0026Preview=true"
        }
      ],
      "source": {
        "discovery": "UNKNOWN"
      },
      "x_generator": {
        "engine": "Vulnogram 0.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "e383dce4-0c27-4495-91c4-0db157728d17",
    "assignerShortName": "Hitachi Energy",
    "cveId": "CVE-2024-2462",
    "datePublished": "2024-06-11T12:48:57.963Z",
    "dateReserved": "2024-03-14T17:09:59.755Z",
    "dateUpdated": "2024-08-01T19:11:53.576Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2024-0400 (GCVE-0-2024-0400)

Vulnerability from cvelistv5 – Published: 2024-03-27 02:03 – Updated: 2025-10-16 08:07

Summary

SCM Software is a client and server application. An Authenticated System manager client can execute LINQ query in the SCM server, for customized filtering. An Authenticated malicious client can send a specially crafted code to skip the validation and execute arbitrary code (RCE) on the SCM Server remotely. Malicious clients can execute any command by using this RCE vulnerability.

Severity

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

SSVC

Exploitation: none Automatable: no Technical Impact: total

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2024-08-06 18:54 UTC

CWE

CWE-94 - Improper Control of Generation of Code ('Code Injection')

Assigner

Hitachi Energy CNA

CNA scorecard C 68/100 over 12 records in the last 180 days details

References

1 reference

URL	Tags
https://publisher.hitachienergy.com/preview?Docum…

Impacted products

2 products

Vendor	Product	Version
Hitachi Energy	MACH SCM	Affected: 4.0 , ≤ 4.38 (custom)
hitachi_energy	mach_scm	Affected: 4.0 , ≤ 4.38 (custom) cpe:2.3:a:hitachi_energy:mach_scm::::::::

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-01T18:04:49.537Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://publisher.hitachienergy.com/preview?DocumentId=8DBD000189\u0026languageCode=en\u0026Preview=true"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "affected": [
          {
            "cpes": [
              "cpe:2.3:a:hitachi_energy:mach_scm:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "mach_scm",
            "vendor": "hitachi_energy",
            "versions": [
              {
                "lessThanOrEqual": "4.38",
                "status": "affected",
                "version": "4.0",
                "versionType": "custom"
              }
            ]
          }
        ],
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2024-0400",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-08-06T18:54:08.600663Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-08-06T19:00:32.693Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "MACH SCM",
          "vendor": "Hitachi Energy",
          "versions": [
            {
              "lessThanOrEqual": "4.38",
              "status": "affected",
              "version": "4.0",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "SCM Software is a client and server application. An Authenticated System manager client can execute LINQ query in the SCM server, for customized filtering. An Authenticated malicious client can send a specially crafted code to skip the validation and execute arbitrary code (RCE) on the SCM Server remotely. Malicious clients can execute any command by using this RCE vulnerability."
            }
          ],
          "value": "SCM Software is a client and server application. An Authenticated System manager client can execute LINQ query in the SCM server, for customized filtering. An Authenticated malicious client can send a specially crafted code to skip the validation and execute arbitrary code (RCE) on the SCM Server remotely. Malicious clients can execute any command by using this RCE vulnerability."
        }
      ],
      "impacts": [
        {
          "capecId": "CAPEC-551",
          "descriptions": [
            {
              "lang": "en",
              "value": "CAPEC-551 Modify Existing Service"
            }
          ]
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-94",
              "description": "CWE-94 Improper Control of Generation of Code (\u0027Code Injection\u0027)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-10-16T08:07:33.107Z",
        "orgId": "e383dce4-0c27-4495-91c4-0db157728d17",
        "shortName": "Hitachi Energy"
      },
      "references": [
        {
          "url": "https://publisher.hitachienergy.com/preview?DocumentId=8DBD000189\u0026languageCode=en\u0026Preview=true"
        }
      ],
      "source": {
        "discovery": "UNKNOWN"
      },
      "x_generator": {
        "engine": "Vulnogram 0.1.0-dev"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "e383dce4-0c27-4495-91c4-0db157728d17",
    "assignerShortName": "Hitachi Energy",
    "cveId": "CVE-2024-0400",
    "datePublished": "2024-03-27T02:03:57.253Z",
    "dateReserved": "2024-01-10T15:23:18.527Z",
    "dateUpdated": "2025-10-16T08:07:33.107Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Find a vulnerability

Search criteria

10 vulnerabilities by hitachi_energy

CVE-2024-41153 (GCVE-0-2024-41153)

CVE-2024-28024 (GCVE-0-2024-28024)

CVE-2024-2011 (GCVE-0-2024-2011)

CVE-2024-2462 (GCVE-0-2024-2462)

CVE-2024-0400 (GCVE-0-2024-0400)

CVE-2024-41153 (GCVE-0-2024-41153)

CVE-2024-28024 (GCVE-0-2024-28024)

CVE-2024-2011 (GCVE-0-2024-2011)

CVE-2024-2462 (GCVE-0-2024-2462)

CVE-2024-0400 (GCVE-0-2024-0400)