A vulnerability exists in the FOXMAN-UN/UNEM server that affects the message queueing mechanism’s certificate validation. If exploited an attacker could spoof a trusted entity causing a loss of confidentiality and integrity.
Weakness
The product does not validate, or incorrectly validates, a certificate.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Foxman-un | Hitachienergy | r15b-pc4 (including) | r15b-pc4 (including) |
| Foxman-un | Hitachienergy | r16b-pc2 (including) | r16b-pc2 (including) |
| Foxman_un | Hitachienergy | r15a (including) | r15a (including) |
| Foxman_un | Hitachienergy | r16a (including) | r16a (including) |
| Unem | Hitachienergy | r15a (including) | r15a (including) |
| Unem | Hitachienergy | r15b-pc4 (including) | r15b-pc4 (including) |
| Unem | Hitachienergy | r16a (including) | r16a (including) |
| Unem | Hitachienergy | r16b-pc2 (including) | r16b-pc2 (including) |
Potential Mitigations
Related Attack Patterns
References
- https://publisher.hitachienergy.com/preview?DocumentId=8DBD000194\u0026languageCode=en\u0026Preview=true
- https://publisher.hitachienergy.com/preview?DocumentId=8DBD000201\u0026languageCode=en\u0026Preview=true
- https://publisher.hitachienergy.com/preview?DocumentId=8DBD000194\u0026languageCode=en\u0026Preview=true
- https://publisher.hitachienergy.com/preview?DocumentId=8DBD000201\u0026languageCode=en\u0026Preview=true