CVE-2023-1711

State: Published
Severity: 4.0 Medium
Published: May 30, 2023
Updated: Jan 9, 2025
Reserved: Mar 30, 2023

Description

A vulnerability exists in a FOXMAN-UN and UNEM logging component, it only affects systems that use remote authentication to the network elements. If exploited an attacker could obtain confidential information.

List of CPEs: * cpe:2.3:a:hitachienergy:foxman_un:R9C:*:*:*:*:*:*:* * cpe:2.3:a:hitachienergy:foxman_un:R10C:*:*:*:*:*:*:*

* cpe:2.3:a:hitachienergy:foxman_un:R11A:*:*:*:*:*:*:*

* cpe:2.3:a:hitachienergy:foxman_un:R11B:*:*:*:*:*:*:*

* cpe:2.3:a:hitachienergy:foxman_un:R14A:*:*:*:*:*:*:*

* cpe:2.3:a:hitachienergy:foxman_un:R14B:*:*:*:*:*:*:*

* cpe:2.3:a:hitachienergy:foxman_un:R15A:*:*:*:*:*:*:*

* cpe:2.3:a:hitachienergy:foxman_un:R15B:*:*:*:*:*:*:*

* cpe:2.3:a:hitachienergy:foxman_un:R16A:*:*:*:*:*:*:*

* * cpe:2.3:a:hitachienergy:unem:R9C:*:*:*:*:*:*:* * cpe:2.3:a:hitachienergy: unem :R10C:*:*:*:*:*:*:*

* cpe:2.3:a:hitachienergy: unem :R11A:*:*:*:*:*:*:*

* cpe:2.3:a:hitachienergy: unem :R11B:*:*:*:*:*:*:*

* cpe:2.3:a:hitachienergy: unem :R14A:*:*:*:*:*:*:*

* cpe:2.3:a:hitachienergy: unem :R14B:*:*:*:*:*:*:*

* cpe:2.3:a:hitachienergy: unem :R15A:*:*:*:*:*:*:*

* cpe:2.3:a:hitachienergy: unem :R15B:*:*:*:*:*:*:*

* cpe:2.3:a:hitachienergy: unem :R16A:*:*:*:*:*:*:*

Scores

CVSS	Score	Vector	Source
3.1	4.0 Medium	CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:U/C:H/I:N/A:N	Hitachi Energy

Weaknesses

CWE-117

Affected Products

Product	Versions
FOXMAN-UNHitachi Energy	FOXMAN-UN R16AAffected FOXMAN-UN R15BAffected FOXMAN-UN R15AAffected FOXMAN-UN R14BAffected FOXMAN-UN R14AAffected FOXMAN-UN R11BAffected FOXMAN-UN R11AAffected FOXMAN-UN R10CAffected FOXMAN-UN R9CAffected
UNEMHitachi Energy	UNEM R16AAffected UNEM R15BAffected UNEM R15AAffected UNEM R14BAffected UNEM R14AAffected UNEM R11BAffected UNEM R11AAffected UNEM R10CAffected UNEM R9CAffected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.