Riskcovery

CVE-2022-3928

Hardcoded credential is found in the message queue

State
Published
Severity
7.1 High
Published
Jan 5, 2023
Updated
Apr 10, 2025
Reserved
Nov 10, 2022

Read the record on cve.org

Description

Hardcoded credential is found in affected products' message queue. An attacker that manages to exploit this vulnerability will be able to access data to the internal message queue.

This issue affects

* FOXMAN-UN product: FOXMAN-UN R15B, FOXMAN-UN R15A, FOXMAN-UN R14B, FOXMAN-UN R14A, FOXMAN-UN R11B, FOXMAN-UN R11A, FOXMAN-UN R10C, FOXMAN-UN R9C; * UNEM product: UNEM R15B, UNEM R15A, UNEM R14B, UNEM R14A, UNEM R11B, UNEM R11A, UNEM R10C, UNEM R9C.

List of CPEs: * cpe:2.3:a:hitachienergy:foxman-un:R15B:*:*:*:*:*:*:*

* cpe:2.3:a:hitachienergy:foxman-un:R15A:*:*:*:*:*:*:* * cpe:2.3:a:hitachienergy:foxman-un:R14B:*:*:*:*:*:*:* * cpe:2.3:a:hitachienergy:foxman-un:R14A:*:*:*:*:*:*:* * cpe:2.3:a:hitachienergy:foxman-un:R11B:*:*:*:*:*:*:* * cpe:2.3:a:hitachienergy:foxman-un:R11A:*:*:*:*:*:*:* * cpe:2.3:a:hitachienergy:foxman-un:R10C:*:*:*:*:*:*:* * cpe:2.3:a:hitachienergy:foxman-un:R9C:*:*:*:*:*:*:* * cpe:2.3:a:hitachienergy:unem:R15B:*:*:*:*:*:*:*

* cpe:2.3:a:hitachienergy:unem:R15A:*:*:*:*:*:*:* * cpe:2.3:a:hitachienergy:unem:R14B:*:*:*:*:*:*:* * cpe:2.3:a:hitachienergy:unem:R14A:*:*:*:*:*:*:* * cpe:2.3:a:hitachienergy:unem:R11B:*:*:*:*:*:*:* * cpe:2.3:a:hitachienergy:unem:R11A:*:*:*:*:*:*:* * cpe:2.3:a:hitachienergy:unem:R10C:*:*:*:*:*:*:* * cpe:2.3:a:hitachienergy:unem:R9C:*:*:*:*:*:*:*

Scores

CVSSScoreVectorSource
3.17.1 HighCVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:NHitachi Energy

Weaknesses

  • CWE-798 Use of Hard-coded Credentials

Affected Products

ProductVersions
FOXMAN-UNHitachi Energy
  • FOXMAN-UN R16ANot affected
  • FOXMAN-UN R15BAffected
  • FOXMAN-UN R15AAffected
  • FOXMAN-UN R14BAffected
  • FOXMAN-UN R14AAffected
  • FOXMAN-UN R11BAffected
  • FOXMAN-UN R11AAffected
  • FOXMAN-UN R10CAffected
  • FOXMAN-UN R9CAffected
UNEMHitachi Energy
  • UNEM R16ANot affected
  • UNEM R15BAffected
  • UNEM R15AAffected
  • UNEM R14BAffected
  • UNEM R14AAffected
  • UNEM R11BAffected
  • UNEM R11AAffected
  • UNEM R10CAffected
  • UNEM R9CAffected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.