What’s Vulnerable › Vulnerabilities

CVE-2024-28021

• Severity: high (CVSS 7.4 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2024-06-11 · updated 2026-06-17
• Weakness: CWE-295

Description

A vulnerability exists in the FOXMAN-UN/UNEM server that affects the message queueing mechanism’s certificate validation. If exploited an attacker could spoof a trusted entity causing a loss of confidentiality and integrity.

Affected products

• Hitachi Energy FOXMAN-UN: r15b-pc4, r16b-pc2
• Hitachienergy Foxman Un: r15a, r16a
• Hitachi Energy UNEM: r15a, r15b-pc4, r16a, r16b-pc2

References

• https://publisher.hitachienergy.com/preview?DocumentId=8DBD000194&languageCode=en&Preview=true
• https://publisher.hitachienergy.com/preview?DocumentId=8DBD000201&languageCode=en&Preview=true
• https://publisher.hitachienergy.com/preview?DocumentId=8DBD000194&languageCode=en&Preview=true
• https://publisher.hitachienergy.com/preview?DocumentId=8DBD000201&languageCode=en&Preview=true

Get alerted when CVE-2024-28021 or the next vulnerability affects your stack