CVE-2024-28022

Published Jun 11, 2024

Last updated 17 days ago

Overview

Description
A vulnerability exists in the UNEM server / APIGateway that if exploited allows a malicious user to perform an arbitrary number of authentication attempts using different passwords, and eventually gain access to other components in the same security realm using the targeted account.
Source
cybersecurity@hitachienergy.com
NVD status
Analyzed

Risk scores

CVSS 3.1

Type
Primary
Base score
6.5
Impact score
3.7
Exploitability score
2.2
Vector string
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:L
Severity
MEDIUM

Weaknesses

nvd@nist.gov
CWE-307
cybersecurity@hitachienergy.com
CWE-307

Social media

Hype score
Not currently trending

Configurations