CVE-2024-2012

Severity: critical (CVSS 9.8 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.6% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2024-06-11 · updated 2026-06-17
Weakness: CWE-288

Description

vulnerability exists in the FOXMAN-UN/UNEM server / API Gateway that if exploited an attacker could use to allow unintended commands or code to be executed on the UNEM server allowing sensitive data to be read or modified or could cause other unintended behavior

Affected products

Hitachi Energy FOXMAN-UN: r15a, r15b-pc4, r16a, r16b-pc2
Hitachi Energy UNEM: r15a, r15b-pc4, r15b-pc5, r16a, r16b-pc2

References

https://publisher.hitachienergy.com/preview?DocumentId=8DBD000201&languageCode=en&Preview=true
https://publisher.hitachienergy.com/preview?DocumentId=8DBD000201&languageCode=en&Preview=true

Get alerted when CVE-2024-2012 or the next vulnerability affects your stack