Description (CNA)
A vulnerability exists in the UNEM server / APIGateway that if exploited allows a malicious user to perform an arbitrary number of authentication attempts using different passwords, and eventually gain access to other components in the same security realm using the targeted account.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Hitachi Energy / FOXMAN-UN | affected FOXMAN-UN R16B; affected FOXMAN-UN R15B; affected FOXMAN-UN R16A; affected FOXMAN-UN R15A |
| Hitachi Energy / UNEM | affected UNEM R16B; affected UNEM R15B; affected UNEM 16A; affected UNEM 15A |
CWE
CWE-307
References
- https://publisher.hitachienergy.com/preview?DocumentId=8DBD000194&languageCode=en&Preview=true
- https://publisher.hitachienergy.com/preview?DocumentId=8DBD000201&languageCode=en&Preview=true
ADP enrichment
No English description supplied.
No references supplied.
No English description supplied.