CVE-2024-2462
mediumpriority · track · 0EPSS 0.002 · 12 %ileEUUSEPSS · scored 2026-10-27
Allow attackers to intercept or falsify data exchanges between the client and the server
remediations
Vendor fix, mitigation, or workaround guidance, as published by each source.
A vendor fix is available.
- FixedFOX61x less than R16Bcisa_csaf_ot
Update to FOX61x R16B
- FixedFOXCST less than 16.2.1cisa_csaf_ot
Update to FOXCST_16.2.1
- FixedFOXMAN-UN R15B or priorcisa_csaf_ot
Update to FOXMAN-UN R15B PC5 and apply general mitigation factors. (Update planned)
- FixedFOXMAN-UN R16B PC2 and earliercisa_csaf_ot
Update to FOXMAN-UN R16B PC3 or later and apply general mitigation factors.
- FixedECST less than 16.2.1cisa_csaf_ot
Update to ECST_16.2.1
- FixedUNEM R15B PC4 or priorcisa_csaf_ot
Update to UNEM R15B PC5 and apply general mitigation factors. (Update planned)
- FixedUNEM R16B PC2 and earliercisa_csaf_ot
Update to UNEM R16B PC3 or later and apply general mitigation factors.
- FixedXMC20 less than R16Bcisa_csaf_ot
Update to XMC20 R16B
- No fix plannedFOXMAN-UN R15Acisa_csaf_ot
EOL versions - no remediation will be available. Recommended to update to FOXMAN-UN R16B PC4 or R15B PC5 (update planned) and apply general mitigation factors.
- No fix plannedFOXMAN-UN R16Acisa_csaf_ot
EOL versions - no remediation will be available. Recommended to update to FOXMAN-UN R16B PC4 or R15B PC5 (update planned) and apply general mitigation factors.
- No fix plannedFOXMAN-UN older than R15Acisa_csaf_ot
EOL versions - no remediation will be available. Recommended to update to FOXMAN-UN R16B PC4 or R15B PC5 (update planned) and apply general mitigation factors.
- No fix plannedUNEM R15Acisa_csaf_ot
EOL versions - no fix will be available. Apply general mitigation factors. It should be noted that customers with a UNEM R16A installation are entitled to an update to the UNEM R16B given the R16B is not in an inactive lifecycle state.
- No fix plannedUNEM R16Acisa_csaf_ot
EOL versions - no fix will be available. Apply general mitigation factors. It should be noted that customers with a UNEM R16A installation are entitled to an update to the UNEM R16B given the R16B is not in an inactive lifecycle state.
cvss
Technical severity, 0–10. One row per scoring source.
base score 0–10 · higher = more severe · hover a vector to decode⚠ sources disagree · low–medium · 3.8–6.8
ssvc
A stakeholder decision — act, attend, or track — from exploitation and impact.
weaknesses
The CWE weakness classes this flaw belongs to.
affected products (56)
Products and version ranges known to be affected.
advisories (2)
Vendor and ecosystem advisories describing this.
- ICSA-25-016-06Hitachi Energy FOX61x, FOXCST, and FOXMAN-UN Products2024-06-11icsa · cisa_csaf_otUS
Hitachi Energy is aware of a vulnerability that affects the FOXMAN-UN/FOXCST versions listed below. If exploited an attacker could potentially intercept or falsify data exchanges between the client and the server. Please refer to the “Recommended Immediate Actions” for information about the remediation.
- ICSA-25-063-05Hitachi Energy UNEM/ECST2024-06-11icsa · cisa_csaf_otUS
Hitachi Energy is aware of a vulnerability that affects the UNEM/ECST versions listed below. If exploited an attacker could potentially intercept or falsify data exchanges between the client and the server. Please refer to the “Recommended Immediate Actions” for information about the remediation.
also known as (3)
Other names and identifiers for this entity.
sources
Which sources assert this record, and when.
references (5)
External citations — patches, advisories, analysis.
- https://cxsecurity.com/cveshow/CVE-2024-2462/cnnvd
- https://nvd.nist.gov/vuln/detail/CVE-2024-2462cnnvd
- https://publisher.hitachienergy.com/preview?DocumentId=8DBD000198&languageCode=en&Preview=truecnnvd
- https://publisher.hitachienergy.com/preview?DocumentId=8DBD000198&languageCode=en&Preview=trueenisa_euvd
- https://publisher.hitachienergy.com/preview?DocumentId=8DBD000198&languageCode=en&Preview=truenvd
Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.
Free scan