Skip to content
CVE Tracker
Back

CVE-2024-2012

vulnerability exists in the FOXMAN-UN/UNEM server / API Gateway that if exploited an attacker could use to allow unintended commands or…

Critical9.1EPSS 0.60%
Published
Updated
Reserved
Assigned by
Hitachi Energy

Description

vulnerability exists in the FOXMAN-UN/UNEM server / API Gateway that if exploited an attacker could use to allow unintended commands or code to be executed on the UNEM server allowing sensitive data to be read or modified or could cause other unintended behavior

Scores

CVSS scores of CVE-2024-2012, by who scored it
Scored byCVSSScoreVector
Hitachi EnergyCNA (assigner)3.1Critical9.1CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
NVDNVD · Modified3.1Critical9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS (exploitation in 30 days)
0.60% · top 51% of all CVEs (2 Nov 2026)
CISA SSVC
Exploitation: none · Automatable: no · Technical impact: total

Loading the EPSS history…

The list uses the assigner's score when there is one, then CISA's, then NVD's: Critical 9.1.

Weakness

Affected products

  • Hitachi Energy · FOXMAN-UN

    • affected FOXMAN-UN R16B PC2
    • unaffected FOXMAN-UN R16B PC3 – ≤ FOXMAN-UN R16B PC4
    • affected FOXMAN-UN R15B PC4
    • unaffected FOXMAN-UN R15B PC5
    • affected FOXMAN-UN R16A
    • affected FOXMAN-UN R15A

  • Hitachi Energy · UNEM

    • affected UNEM R16B PC2
    • unaffected UNEM R16B PC3 – ≤ UNEM R16B PC4
    • affected UNEM R15B PC4
    • affected UNEM R15B PC5
    • affected UNEM R15A
    • affected UNEM R16A

References (1)

Sources

The same CVE in the primary databases and aggregators, to check against.

Record last updated .