Hitachi Energy UNEM
Successful exploitation of these vulnerabilities could allow an unauthorized user to obtain sensitive information and gain access to the network elements managed by the UNEM and could cause availability issue on affected UNEM products.
describes (5)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2022-3929US | critical9.8OT elevated | — | ||
Communication between the client and the server application of the affected products is partially done using CORBA (Common Object Request Broker Architecture) over TCP/IP. This pr… | ||||
| CVE-2022-3928US | medium5.5OT elevated | — | ||
Hardcoded credential is found in affected products' message queue. An attacker that manages to exploit this vulnerability will be able to access data to the internal message queue… | ||||
| CVE-2022-3927US | critical9.8OT elevated | — | ||
The affected products store both public and private key that are used to sign and
protect Custom Parameter Set (CPS) file from modification. An attacker that manages to exploit th… | ||||
| CVE-2021-40342US | critical9.8OT elevated | — | ||
In the DES implementation, the affected product versions use a default key for encryption. Successful exploitation allows an attacker to obtain sensitive information and gain acce… | ||||
| CVE-2021-40341US | medium5.5 | — | ||
DES cipher, which has inadequate encryption strength, is used Hitachi Energy FOXMAN-UN to encrypt user credentials used to access the Network Elements. Successful exploitation allo… | ||||
references
External citations — patches, advisories, analysis.
remediations (10)
- MitigationUNEM
Avoid embedded FOXCST with RADIUS authentication.
- MitigationUNEM
Avoid embedded FOXCST with RADIUS authentication.
- MitigationUNEM
Avoid embedded FOXCST with RADIUS authentication.
- MitigationUNEM
Avoid embedded FOXCST with RADIUS authentication.
- MitigationUNEM
Avoid embedded FOXCST with RADIUS authentication.
- FixedUNEM
For CVE-2021-40341, CVE-2021-40342, UNEM R16A has partial remediation. The full remediation will be complete in an upcoming UNEM release.
- FixedUNEM
For CVE-2021-40341, CVE-2021-40342, UNEM R16A has partial remediation. The full remediation will be complete in an upcoming UNEM release.
- FixedUNEM
Hitachi Energy remediated these vulnerabilities in UNEM R16A and recommends users upgrade to this version.
- FixedUNEM
Hitachi Energy remediated these vulnerabilities in UNEM R16A and recommends users upgrade to this version.
- FixedUNEM
Hitachi Energy remediated these vulnerabilities in UNEM R16A and recommends users upgrade to this version.
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan