What’s Vulnerable › Vulnerabilities

CVE-2024-2462

• Severity: medium (CVSS 6.8 v4.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2024-06-11 · updated 2026-06-17
• Weakness: CWE-297

Description

Allow attackers to intercept or falsify data exchanges between the client and the server

Affected products

• Hitachi Energy Ecst: ECST_16.2.1
• Hitachi Energy Fox61X: before FOX61x R16B — fixed in FOX61x R16B
• Hitachi Energy Foxcst: before FOXCST_16.2.1 — fixed in FOXCST_16.2.1
• Hitachi Energy Foxman-Un: through FOXMAN-UN R16B PC2; through FOXMAN-UN R15B PC4; FOXMAN-UN R16A, FOXMAN-UN R15A
• Hitachi Energy Unem: through UNEM R16B PC2; through UNEM R15B PC4; UNEM R16A, UNEM R15A
• Hitachi Energy Xmc20: R16B

How to fix

Upgrade to a fixed version: Hitachi Energy Fox61X FOX61x R16B; Hitachi Energy Foxcst FOXCST_16.2.1. Check the vendor advisory for mitigations.

References

• https://publisher.hitachienergy.com/preview?DocumentId=8DBD000198&languageCode=en&Preview=true
• https://publisher.hitachienergy.com/preview?DocumentId=8DBD000198&languageCode=en&Preview=true

Get alerted when CVE-2024-2462 or the next vulnerability affects your stack