Hitachi Energy UNEM
Successful exploitation of these vulnerabilities could allow an unauthorized user to obtain sensitive information and gain access to the network elements managed by the UNEM and could cause availability issue on affected UNEM products.
beschreibt (5)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2022-3929US | critical9.8OT erhöht | — | ||
Communication between the client and the server application of the affected products is partially done using CORBA (Common Object Request Broker Architecture) over TCP/IP. This pr… | ||||
| CVE-2022-3928US | medium5.5OT erhöht | — | ||
Hardcoded credential is found in affected products' message queue. An attacker that manages to exploit this vulnerability will be able to access data to the internal message queue… | ||||
| CVE-2022-3927US | critical9.8OT erhöht | — | ||
The affected products store both public and private key that are used to sign and
protect Custom Parameter Set (CPS) file from modification. An attacker that manages to exploit th… | ||||
| CVE-2021-40342US | critical9.8OT erhöht | — | ||
In the DES implementation, the affected product versions use a default key for encryption. Successful exploitation allows an attacker to obtain sensitive information and gain acce… | ||||
| CVE-2021-40341US | medium5.5 | — | ||
DES cipher, which has inadequate encryption strength, is used Hitachi Energy FOXMAN-UN to encrypt user credentials used to access the Network Elements. Successful exploitation allo… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
Behebungen (10)
- MitigationUNEM
Avoid embedded FOXCST with RADIUS authentication.
- MitigationUNEM
Avoid embedded FOXCST with RADIUS authentication.
- MitigationUNEM
Avoid embedded FOXCST with RADIUS authentication.
- MitigationUNEM
Avoid embedded FOXCST with RADIUS authentication.
- MitigationUNEM
Avoid embedded FOXCST with RADIUS authentication.
- BehobenUNEM
For CVE-2021-40341, CVE-2021-40342, UNEM R16A has partial remediation. The full remediation will be complete in an upcoming UNEM release.
- BehobenUNEM
For CVE-2021-40341, CVE-2021-40342, UNEM R16A has partial remediation. The full remediation will be complete in an upcoming UNEM release.
- BehobenUNEM
Hitachi Energy remediated these vulnerabilities in UNEM R16A and recommends users upgrade to this version.
- BehobenUNEM
Hitachi Energy remediated these vulnerabilities in UNEM R16A and recommends users upgrade to this version.
- BehobenUNEM
Hitachi Energy remediated these vulnerabilities in UNEM R16A and recommends users upgrade to this version.
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan