CVE-2024-2462

mediumPriorität · verfolgen · 0EPSS 0.002 · 12. PerzentilEUUS
grimoire priorityP3 · Track
Exploitable?
—
no known exploitation
Likely / severe?
0.22% (12th) EPSS
CVSS 4.9 · medium
Is it mine?
56 products
Prüfe deine Angriffsfläche
Who says so?
3 sources
cnnvd · enisa_euvd · cisa_csaf_ot

EPSS · bewertet 2026-10-27

Allow attackers to intercept or falsify data exchanges between the client and the server

01

Behebungen

Hersteller-Fix, Mitigation oder Workaround, wie von den Quellen veröffentlicht.

Ein Hersteller-Fix ist verfügbar.

  • BehobenFOX61x less than R16Bcisa_csaf_ot

    Update to FOX61x R16B

  • BehobenFOXCST less than 16.2.1cisa_csaf_ot

    Update to FOXCST_16.2.1

  • BehobenFOXMAN-UN R15B or priorcisa_csaf_ot

    Update to FOXMAN-UN R15B PC5 and apply general mitigation factors. (Update planned)

  • BehobenFOXMAN-UN R16B PC2 and earliercisa_csaf_ot

    Update to FOXMAN-UN R16B PC3 or later and apply general mitigation factors.

  • BehobenECST less than 16.2.1cisa_csaf_ot

    Update to ECST_16.2.1

  • BehobenUNEM R15B PC4 or priorcisa_csaf_ot

    Update to UNEM R15B PC5 and apply general mitigation factors. (Update planned)

  • BehobenUNEM R16B PC2 and earliercisa_csaf_ot

    Update to UNEM R16B PC3 or later and apply general mitigation factors.

  • BehobenXMC20 less than R16Bcisa_csaf_ot

    Update to XMC20 R16B

  • Kein Fix geplantFOXMAN-UN R15Acisa_csaf_ot

    EOL versions - no remediation will be available. Recommended to update to FOXMAN-UN R16B PC4 or R15B PC5 (update planned) and apply general mitigation factors.

  • Kein Fix geplantFOXMAN-UN R16Acisa_csaf_ot

    EOL versions - no remediation will be available. Recommended to update to FOXMAN-UN R16B PC4 or R15B PC5 (update planned) and apply general mitigation factors.

  • Kein Fix geplantFOXMAN-UN older than R15Acisa_csaf_ot

    EOL versions - no remediation will be available. Recommended to update to FOXMAN-UN R16B PC4 or R15B PC5 (update planned) and apply general mitigation factors.

  • Kein Fix geplantUNEM R15Acisa_csaf_ot

    EOL versions - no fix will be available. Apply general mitigation factors. It should be noted that customers with a UNEM R16A installation are entitled to an update to the UNEM R16B given the R16B is not in an inactive lifecycle state.

  • Kein Fix geplantUNEM R16Acisa_csaf_ot

    EOL versions - no fix will be available. Apply general mitigation factors. It should be noted that customers with a UNEM R16A installation are entitled to an update to the UNEM R16B given the R16B is not in an inactive lifecycle state.

02

cvss

Technischer Schweregrad, 0–10. Eine Zeile je Quelle.

6.8
010

Basiswert 0–10 · höher = schwerwiegender · Vektor überfahren zum Auflösen⚠ Quellen uneinig · low–medium · 3.8–6.8

v3.14.9mediumCVSS:3.1/AV:P/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:Hsecondary · CISA US
v4.06.8mediumCVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:A/VC:L/VI:N/VA:H/SC:L/SI:N/SA:Hsecondary · ENISA EU
v4.06.8mediumCVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:A/VC:L/VI:N/VA:H/SC:L/SI:N/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:Xsecondary · cybersecurity@hitachienergy.com
v4.03.8lowCVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:A/VC:L/VI:N/VA:H/SC:L/SI:N/SA:H/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:Xsecondary · CVSS-BT (t0sche)
03

SSVC

Eine Handlungsentscheidung — aus Ausnutzung und Auswirkung.

Trackcoordinatorcisa_ssvcUS
04

schwächen

Die CWE-Schwächeklassen, zu denen dies gehört.

05

betroffene Produkte (56)

Betroffene Produkte und Versionsbereiche.

06

Advisories (2)

Hersteller- und Ökosystem-Meldungen dazu.

  • ICSA-25-016-06Hitachi Energy FOX61x, FOXCST, and FOXMAN-UN Products2024-06-11icsa · cisa_csaf_otUS

    Hitachi Energy is aware of a vulnerability that affects the FOXMAN-UN/FOXCST versions listed below. If exploited an attacker could potentially intercept or falsify data exchanges between the client and the server. Please refer to the “Recommended Immediate Actions” for information about the remediation.

  • ICSA-25-063-05Hitachi Energy UNEM/ECST2024-06-11icsa · cisa_csaf_otUS

    Hitachi Energy is aware of a vulnerability that affects the UNEM/ECST versions listed below. If exploited an attacker could potentially intercept or falsify data exchanges between the client and the server. Please refer to the “Recommended Immediate Actions” for information about the remediation.

07

auch bekannt als (3)

Weitere Namen und Kennungen dieser Entität.

08

quellen

Welche Quellen diesen Datensatz belegen und wann.

veröffentlicht 2024-06-11geändert 2026-06-17
09

Referenzen (5)

Externe Belege — Patches, Meldungen, Analysen.

scry

Angreifer nutzen Schwachstellen wie diese gegen im Internet exponierte Dienste aus. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.

Kostenloser Scan