VULNERABILITY INTELLIGENCE

CVE-2024-28022

CVSS score6.5 MEDIUM
EPSS probability0.36%
CISA KEVNot currently listed
Published2024-06-11
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:L

Description

A vulnerability exists in the UNEM server / APIGateway that if exploited allows a malicious user to perform an arbitrary number of authentication attempts using different passwords, and eventually gain access to other components in the same security realm using the targeted account.

Weakness classification

  • cybersecurity@hitachienergy.com: CWE-307
  • nvd@nist.gov: CWE-307

Primary references