VULNERABILITY INTELLIGENCE
CVE-2024-2012
CVSS score9.1 CRITICAL
EPSS probability0.60%
CISA KEVNot currently listed
Published2024-06-11
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
Description
vulnerability exists in the FOXMAN-UN/UNEM server / API Gateway that if exploited an attacker could use to allow unintended commands or code to be executed on the UNEM server allowing sensitive data to be read or modified or could cause other unintended behavior
Weakness classification
- CWE-288: Authentication Bypass Using an Alternate Path or Channel
Primary references
- cybersecurity@hitachienergy.com — Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Vendor Advisory