CVE-2024-2462

mediumpriority · track · 0EPSS 0.002 · 12 %ileEUUS
grimoire priorityP3 · Track
Exploitable?
—
no known exploitation
Likely / severe?
0.22% (12th) EPSS
CVSS 4.9 · medium
Is it mine?
56 products
Check your exposure
Who says so?
3 sources
cnnvd · enisa_euvd · cisa_csaf_ot

EPSS · scored 2026-10-27

Allow attackers to intercept or falsify data exchanges between the client and the server

01

remediations

Vendor fix, mitigation, or workaround guidance, as published by each source.

A vendor fix is available.

  • FixedFOX61x less than R16Bcisa_csaf_ot

    Update to FOX61x R16B

  • FixedFOXCST less than 16.2.1cisa_csaf_ot

    Update to FOXCST_16.2.1

  • FixedFOXMAN-UN R15B or priorcisa_csaf_ot

    Update to FOXMAN-UN R15B PC5 and apply general mitigation factors. (Update planned)

  • FixedFOXMAN-UN R16B PC2 and earliercisa_csaf_ot

    Update to FOXMAN-UN R16B PC3 or later and apply general mitigation factors.

  • FixedECST less than 16.2.1cisa_csaf_ot

    Update to ECST_16.2.1

  • FixedUNEM R15B PC4 or priorcisa_csaf_ot

    Update to UNEM R15B PC5 and apply general mitigation factors. (Update planned)

  • FixedUNEM R16B PC2 and earliercisa_csaf_ot

    Update to UNEM R16B PC3 or later and apply general mitigation factors.

  • FixedXMC20 less than R16Bcisa_csaf_ot

    Update to XMC20 R16B

  • No fix plannedFOXMAN-UN R15Acisa_csaf_ot

    EOL versions - no remediation will be available. Recommended to update to FOXMAN-UN R16B PC4 or R15B PC5 (update planned) and apply general mitigation factors.

  • No fix plannedFOXMAN-UN R16Acisa_csaf_ot

    EOL versions - no remediation will be available. Recommended to update to FOXMAN-UN R16B PC4 or R15B PC5 (update planned) and apply general mitigation factors.

  • No fix plannedFOXMAN-UN older than R15Acisa_csaf_ot

    EOL versions - no remediation will be available. Recommended to update to FOXMAN-UN R16B PC4 or R15B PC5 (update planned) and apply general mitigation factors.

  • No fix plannedUNEM R15Acisa_csaf_ot

    EOL versions - no fix will be available. Apply general mitigation factors. It should be noted that customers with a UNEM R16A installation are entitled to an update to the UNEM R16B given the R16B is not in an inactive lifecycle state.

  • No fix plannedUNEM R16Acisa_csaf_ot

    EOL versions - no fix will be available. Apply general mitigation factors. It should be noted that customers with a UNEM R16A installation are entitled to an update to the UNEM R16B given the R16B is not in an inactive lifecycle state.

02

cvss

Technical severity, 0–10. One row per scoring source.

6.8
010

base score 0–10 · higher = more severe · hover a vector to decode⚠ sources disagree · low–medium · 3.8–6.8

v3.14.9mediumCVSS:3.1/AV:P/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:Hsecondary · CISA US
v4.06.8mediumCVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:A/VC:L/VI:N/VA:H/SC:L/SI:N/SA:Hsecondary · ENISA EU
v4.06.8mediumCVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:A/VC:L/VI:N/VA:H/SC:L/SI:N/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:Xsecondary · cybersecurity@hitachienergy.com
v4.03.8lowCVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:A/VC:L/VI:N/VA:H/SC:L/SI:N/SA:H/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:Xsecondary · CVSS-BT (t0sche)
03

ssvc

A stakeholder decision — act, attend, or track — from exploitation and impact.

Trackcoordinatorcisa_ssvcUS
04

weaknesses

The CWE weakness classes this flaw belongs to.

05

affected products (56)

Products and version ranges known to be affected.

06

advisories (2)

Vendor and ecosystem advisories describing this.

  • ICSA-25-016-06Hitachi Energy FOX61x, FOXCST, and FOXMAN-UN Products2024-06-11icsa · cisa_csaf_otUS

    Hitachi Energy is aware of a vulnerability that affects the FOXMAN-UN/FOXCST versions listed below. If exploited an attacker could potentially intercept or falsify data exchanges between the client and the server. Please refer to the “Recommended Immediate Actions” for information about the remediation.

  • ICSA-25-063-05Hitachi Energy UNEM/ECST2024-06-11icsa · cisa_csaf_otUS

    Hitachi Energy is aware of a vulnerability that affects the UNEM/ECST versions listed below. If exploited an attacker could potentially intercept or falsify data exchanges between the client and the server. Please refer to the “Recommended Immediate Actions” for information about the remediation.

07

also known as (3)

Other names and identifiers for this entity.

08

sources

Which sources assert this record, and when.

published 2024-06-11modified 2026-06-17
09

references (5)

External citations — patches, advisories, analysis.

scry

Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.

Free scan