Riskcovery

CVE-2024-2462

State
Published
Severity
6.8 Medium
Published
Jun 11, 2024
Updated
Aug 1, 2024
Reserved
Mar 14, 2024

Read the record on cve.org

Description

Allow attackers to intercept or falsify data exchanges between the client and the server

Scores

CVSSScoreVectorSource
4.06.8 MediumCVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:A/VC:L/VI:N/VA:H/SC:L/SI:N/SA:HHitachi Energy

Weaknesses

  • CWE-297 Improper Validation of Certificate with Host Mismatch

Affected Products

ProductVersions
FOXMAN-UNHitachi Energy
  • FOXMAN-UN R16B PC2 and earlierAffected
  • FOXMAN-UN R16B PC3Not affected
  • FOXMAN-UN R15B PC4 and earlierAffected
  • FOXMAN-UN R15B PC5Not affected
  • FOXMAN-UN R16AAffected
  • FOXMAN-UN R15AAffected
FOX61xHitachi Energy
  • before FOX61x R16BAffected
  • FOX61x R16BNot affected
FOXCSTHitachi Energy
  • before FOXCST_16.2.1Affected
  • FOXCST_16.2.1Not affected
UNEMHitachi Energy
  • UNEM R16B PC2 and earlierAffected
  • UNEM R16B PC3Not affected
  • UNEM R15B PC4 and earlierAffected
  • UNEM R15B PC5Not affected
  • UNEM R16AAffected
  • UNEM R15AAffected
XMC20Hitachi Energy
  • R16BAffected
ECSTHitachi Energy
  • ECST_16.2.1Affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.