Hitachi Energy FOXMAN-UN
Successful exploitation of these vulnerabilities could allow an unauthorized user to obtain sensitive information and gain access to the network elements managed by the FOXMAN-UN, and could cause an availability issue on affected FOXMAN-UN products.
describes (5)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2022-3929US | critical9.8OT elevated | — | ||
Communication between the client and the server application of the affected products is partially done using CORBA (Common Object Request Broker Architecture) over TCP/IP. This pr… | ||||
| CVE-2022-3928US | medium5.5OT elevated | — | ||
Hardcoded credential is found in affected products' message queue. An attacker that manages to exploit this vulnerability will be able to access data to the internal message queue… | ||||
| CVE-2022-3927US | critical9.8OT elevated | — | ||
The affected products store both public and private key that are used to sign and
protect Custom Parameter Set (CPS) file from modification. An attacker that manages to exploit th… | ||||
| CVE-2021-40342US | critical9.8OT elevated | — | ||
In the DES implementation, the affected product versions use a default key for encryption. Successful exploitation allows an attacker to obtain sensitive information and gain acce… | ||||
| CVE-2021-40341US | medium5.5 | — | ||
DES cipher, which has inadequate encryption strength, is used Hitachi Energy FOXMAN-UN to encrypt user credentials used to access the Network Elements. Successful exploitation allo… | ||||
references
External citations — patches, advisories, analysis.
remediations (10)
- MitigationFOXMAN-UN
Avoid embedded FOXCST with RADIUS authentication.
- MitigationFOXMAN-UN
Avoid embedded FOXCST with RADIUS authentication.
- MitigationFOXMAN-UN
Avoid embedded FOXCST with RADIUS authentication.
- MitigationFOXMAN-UN
Avoid embedded FOXCST with RADIUS authentication.
- MitigationFOXMAN-UN
Avoid embedded FOXCST with RADIUS authentication.
- FixedFOXMAN-UN
For CVE-2021-40341, CVE-2021-40342, FOXMAN-UN R16A has partial remediation. The full remediation will be complete in an upcoming FOXMAN-UN release.
- FixedFOXMAN-UN
For CVE-2021-40341, CVE-2021-40342, FOXMAN-UN R16A has partial remediation. The full remediation will be complete in an upcoming FOXMAN-UN release.
- FixedFOXMAN-UN
Hitachi Energy has remediated these vulnerabilities in FOXMAN-UN R16A and recommends users upgrade to this version.
- FixedFOXMAN-UN
Hitachi Energy has remediated these vulnerabilities in FOXMAN-UN R16A and recommends users upgrade to this version.
- FixedFOXMAN-UN
Hitachi Energy has remediated these vulnerabilities in FOXMAN-UN R16A and recommends users upgrade to this version.
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan