CVE-2024-2462
mediumPriorität · verfolgen · 0EPSS 0.002 · 12. PerzentilEUUSEPSS · bewertet 2026-10-27
Allow attackers to intercept or falsify data exchanges between the client and the server
Behebungen
Hersteller-Fix, Mitigation oder Workaround, wie von den Quellen veröffentlicht.
Ein Hersteller-Fix ist verfügbar.
- BehobenFOX61x less than R16Bcisa_csaf_ot
Update to FOX61x R16B
- BehobenFOXCST less than 16.2.1cisa_csaf_ot
Update to FOXCST_16.2.1
- BehobenFOXMAN-UN R15B or priorcisa_csaf_ot
Update to FOXMAN-UN R15B PC5 and apply general mitigation factors. (Update planned)
- BehobenFOXMAN-UN R16B PC2 and earliercisa_csaf_ot
Update to FOXMAN-UN R16B PC3 or later and apply general mitigation factors.
- BehobenECST less than 16.2.1cisa_csaf_ot
Update to ECST_16.2.1
- BehobenUNEM R15B PC4 or priorcisa_csaf_ot
Update to UNEM R15B PC5 and apply general mitigation factors. (Update planned)
- BehobenUNEM R16B PC2 and earliercisa_csaf_ot
Update to UNEM R16B PC3 or later and apply general mitigation factors.
- BehobenXMC20 less than R16Bcisa_csaf_ot
Update to XMC20 R16B
- Kein Fix geplantFOXMAN-UN R15Acisa_csaf_ot
EOL versions - no remediation will be available. Recommended to update to FOXMAN-UN R16B PC4 or R15B PC5 (update planned) and apply general mitigation factors.
- Kein Fix geplantFOXMAN-UN R16Acisa_csaf_ot
EOL versions - no remediation will be available. Recommended to update to FOXMAN-UN R16B PC4 or R15B PC5 (update planned) and apply general mitigation factors.
- Kein Fix geplantFOXMAN-UN older than R15Acisa_csaf_ot
EOL versions - no remediation will be available. Recommended to update to FOXMAN-UN R16B PC4 or R15B PC5 (update planned) and apply general mitigation factors.
- Kein Fix geplantUNEM R15Acisa_csaf_ot
EOL versions - no fix will be available. Apply general mitigation factors. It should be noted that customers with a UNEM R16A installation are entitled to an update to the UNEM R16B given the R16B is not in an inactive lifecycle state.
- Kein Fix geplantUNEM R16Acisa_csaf_ot
EOL versions - no fix will be available. Apply general mitigation factors. It should be noted that customers with a UNEM R16A installation are entitled to an update to the UNEM R16B given the R16B is not in an inactive lifecycle state.
cvss
Technischer Schweregrad, 0–10. Eine Zeile je Quelle.
Basiswert 0–10 · höher = schwerwiegender · Vektor überfahren zum Auflösen⚠ Quellen uneinig · low–medium · 3.8–6.8
SSVC
Eine Handlungsentscheidung — aus Ausnutzung und Auswirkung.
schwächen
Die CWE-Schwächeklassen, zu denen dies gehört.
betroffene Produkte (56)
Betroffene Produkte und Versionsbereiche.
Advisories (2)
Hersteller- und Ökosystem-Meldungen dazu.
- ICSA-25-016-06Hitachi Energy FOX61x, FOXCST, and FOXMAN-UN Products2024-06-11icsa · cisa_csaf_otUS
Hitachi Energy is aware of a vulnerability that affects the FOXMAN-UN/FOXCST versions listed below. If exploited an attacker could potentially intercept or falsify data exchanges between the client and the server. Please refer to the “Recommended Immediate Actions” for information about the remediation.
- ICSA-25-063-05Hitachi Energy UNEM/ECST2024-06-11icsa · cisa_csaf_otUS
Hitachi Energy is aware of a vulnerability that affects the UNEM/ECST versions listed below. If exploited an attacker could potentially intercept or falsify data exchanges between the client and the server. Please refer to the “Recommended Immediate Actions” for information about the remediation.
auch bekannt als (3)
Weitere Namen und Kennungen dieser Entität.
quellen
Welche Quellen diesen Datensatz belegen und wann.
Referenzen (5)
Externe Belege — Patches, Meldungen, Analysen.
- https://cxsecurity.com/cveshow/CVE-2024-2462/cnnvd
- https://nvd.nist.gov/vuln/detail/CVE-2024-2462cnnvd
- https://publisher.hitachienergy.com/preview?DocumentId=8DBD000198&languageCode=en&Preview=truecnnvd
- https://publisher.hitachienergy.com/preview?DocumentId=8DBD000198&languageCode=en&Preview=trueenisa_euvd
- https://publisher.hitachienergy.com/preview?DocumentId=8DBD000198&languageCode=en&Preview=truenvd
Angreifer nutzen Schwachstellen wie diese gegen im Internet exponierte Dienste aus. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan