A user/password reuse vulnerability exists in the FOXMAN-UN/UNEM application and server management. If exploited a malicious high-privileged user could use the passwords and login information through complex routines to extend access on the server and other services.
Weakness
The product does not properly manage a user within its environment.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Foxman-un | Hitachienergy | r15a (including) | r15a (including) |
| Foxman-un | Hitachienergy | r15b (including) | r15b (including) |
| Foxman-un | Hitachienergy | r16a (including) | r16a (including) |
| Foxman-un | Hitachienergy | r16b (including) | r16b (including) |
| Unem | Hitachienergy | r15a (including) | r15a (including) |
| Unem | Hitachienergy | r15b (including) | r15b (including) |
| Unem | Hitachienergy | r16a (including) | r16a (including) |
| Unem | Hitachienergy | r16b (including) | r16b (including) |
References
- https://publisher.hitachienergy.com/preview?DocumentId=8DBD000194\u0026languageCode=en\u0026Preview=true
- https://publisher.hitachienergy.com/preview?DocumentId=8DBD000201\u0026languageCode=en\u0026Preview=true
- https://publisher.hitachienergy.com/preview?DocumentId=8DBD000194\u0026languageCode=en\u0026Preview=true
- https://publisher.hitachienergy.com/preview?DocumentId=8DBD000201\u0026languageCode=en\u0026Preview=true