vulnerability exists in the FOXMAN-UN/UNEM server / API Gateway that if exploited an attacker could use to allow unintended commands or code to be executed on the UNEM server allowing sensitive data to be read or modified or could cause other unintended behavior
Weakness
The product requires authentication, but the product has an alternate path or channel that does not require authentication.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Foxman-un | Hitachienergy | r15a (including) | r15a (including) |
| Foxman-un | Hitachienergy | r15b-pc4 (including) | r15b-pc4 (including) |
| Foxman-un | Hitachienergy | r16a (including) | r16a (including) |
| Foxman-un | Hitachienergy | r16b-pc2 (including) | r16b-pc2 (including) |
| Unem | Hitachienergy | r15a (including) | r15a (including) |
| Unem | Hitachienergy | r15b-pc4 (including) | r15b-pc4 (including) |
| Unem | Hitachienergy | r15b-pc5 (including) | r15b-pc5 (including) |
| Unem | Hitachienergy | r16a (including) | r16a (including) |
| Unem | Hitachienergy | r16b-pc2 (including) | r16b-pc2 (including) |
Potential Mitigations
Related Attack Patterns
References
- https://publisher.hitachienergy.com/preview?DocumentId=8DBD000201\u0026languageCode=en\u0026Preview=true
- https://publisher.hitachienergy.com/preview?DocumentId=8DBD000201\u0026languageCode=en\u0026Preview=true