Hitachi Energy FOXMAN-UN
Successful exploitation of these vulnerabilities could allow an unauthorized user to obtain sensitive information and gain access to the network elements managed by the FOXMAN-UN, and could cause an availability issue on affected FOXMAN-UN products.
beschreibt (5)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2022-3929US | critical9.8OT erhöht | — | ||
Communication between the client and the server application of the affected products is partially done using CORBA (Common Object Request Broker Architecture) over TCP/IP. This pr… | ||||
| CVE-2022-3928US | medium5.5OT erhöht | — | ||
Hardcoded credential is found in affected products' message queue. An attacker that manages to exploit this vulnerability will be able to access data to the internal message queue… | ||||
| CVE-2022-3927US | critical9.8OT erhöht | — | ||
The affected products store both public and private key that are used to sign and
protect Custom Parameter Set (CPS) file from modification. An attacker that manages to exploit th… | ||||
| CVE-2021-40342US | critical9.8OT erhöht | — | ||
In the DES implementation, the affected product versions use a default key for encryption. Successful exploitation allows an attacker to obtain sensitive information and gain acce… | ||||
| CVE-2021-40341US | medium5.5 | — | ||
DES cipher, which has inadequate encryption strength, is used Hitachi Energy FOXMAN-UN to encrypt user credentials used to access the Network Elements. Successful exploitation allo… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
Behebungen (10)
- MitigationFOXMAN-UN
Avoid embedded FOXCST with RADIUS authentication.
- MitigationFOXMAN-UN
Avoid embedded FOXCST with RADIUS authentication.
- MitigationFOXMAN-UN
Avoid embedded FOXCST with RADIUS authentication.
- MitigationFOXMAN-UN
Avoid embedded FOXCST with RADIUS authentication.
- MitigationFOXMAN-UN
Avoid embedded FOXCST with RADIUS authentication.
- BehobenFOXMAN-UN
For CVE-2021-40341, CVE-2021-40342, FOXMAN-UN R16A has partial remediation. The full remediation will be complete in an upcoming FOXMAN-UN release.
- BehobenFOXMAN-UN
For CVE-2021-40341, CVE-2021-40342, FOXMAN-UN R16A has partial remediation. The full remediation will be complete in an upcoming FOXMAN-UN release.
- BehobenFOXMAN-UN
Hitachi Energy has remediated these vulnerabilities in FOXMAN-UN R16A and recommends users upgrade to this version.
- BehobenFOXMAN-UN
Hitachi Energy has remediated these vulnerabilities in FOXMAN-UN R16A and recommends users upgrade to this version.
- BehobenFOXMAN-UN
Hitachi Energy has remediated these vulnerabilities in FOXMAN-UN R16A and recommends users upgrade to this version.
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan