Advisories · Technology
Hitachi Energy FOXMAN-UN.
Every CVE that names Hitachi Energy FOXMAN-UN among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 8.0 High
A user/password reuse vulnerability exists in the FOXMAN-UN/UNEM application and server management.
- Hitachi Energy FOXMAN-UN
- Hitachi Energy UNEM
- CWE-286
- CVSS 4.1 Medium
Cleartext storage of sensitive information in Hitachi Energy FOXMAN-UN and others
- Hitachi Energy FOXMAN-UN
- Hitachi Energy UNEM
- Information disclosure
- CVSS 6.5 Medium
Unlimited authentication attempts in Hitachi Energy FOXMAN-UN and others
- Hitachi Energy FOXMAN-UN
- Hitachi Energy UNEM
- Authentication bypass
- CVSS 5.7 Medium
Hard-coded password in Hitachi Energy FOXMAN-UN and others
- Hitachi Energy FOXMAN-UN
- Hitachi Energy UNEM
- Hard-coded credentials
- CVSS 7.4 High
Improper certificate validation in Hitachi Energy FOXMAN-UN and others
- Hitachi Energy FOXMAN-UN
- Hitachi Energy UNEM
- Weak cryptography or TLS
- CVSS 8.6 High
Heap-based buffer overflow in Hitachi Energy FOXMAN-UN and others
- Hitachi Energy FOXMAN-UN
- Hitachi Energy UNEM
- Memory corruption
- CVSS 9.1 CriticalCritical · CVSS 9+
Authentication bypass in Hitachi Energy FOXMAN-UN and others
- Hitachi Energy FOXMAN-UN
- Hitachi Energy UNEM
- Authentication bypass
- CVSS 10.0 CriticalCritical · CVSS 9+
Authentication bypass in Hitachi Energy FOXMAN-UN and others
- Hitachi Energy FOXMAN-UN
- Hitachi Energy UNEM
- Authentication bypass
- CVSS 6.8 Medium
Improper certificate validation in Hitachi Energy FOXMAN-UN and others
- Hitachi Energy FOXMAN-UN
- Hitachi Energy FOX61x
- Weak cryptography or TLS
- CVSS 4.0 Medium
Log injection in Hitachi Energy FOXMAN-UN and others
- Hitachi Energy FOXMAN-UN
- Hitachi Energy UNEM
- Other injection
- CVSS 8.3 High
Communication between the client and server partially using CORBA over TCP/IP
- Hitachi Energy FOXMAN-UN
- Hitachi Energy UNEM
- Weak cryptography or TLS
- CVSS 7.1 High
Hardcoded credential is found in the message queue
- Hitachi Energy FOXMAN-UN
- Hitachi Energy UNEM
- Hard-coded credentials
- CVSS 8.0 High
The affected products store public and private key that are used to sign and protect custom parameter set files from modification.
- Hitachi Energy FOXMAN-UN
- Hitachi Energy UNEM
- Hard-coded credentials
- CVSS 7.1 High
Use of default key for encryption
- Hitachi Energy FOXMAN-UN
- Hitachi Energy UNEM
- Hard-coded credentials
- CVSS 7.1 High
Weak DES encryption
- Hitachi Energy FOXMAN-UN
- Hitachi Energy UNEM
- Weak cryptography or TLS