Approved changes feed: RSS · Atom

cpe:2.3:a:hitachienergy:unem:r16b:pc2:*:*:*:*:*:*

part: a version: r16b update: pc2

VendorHitachienergy (2cd248c7-aee9-59a5-80aa-6fb18cc538ff)
ProductUnem (03819a17-368b-5327-ae47-11a00b5a2ccc)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-2013 vulnerable 2026-06-03 14:55:28.152849 Details available
CRITICAL (10)
An authentication bypass vulnerability exists in the FOXMAN-UN/UNEM server / API Gateway component that if exploited allows attackers without any access to interact with the services and the post-authentication attack surface.
Published: 2024-06-11T13:14:40.501Z
Updated: 2024-08-01T18:56:22.747Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-2012 vulnerable 2026-06-03 14:55:28.152026 Details available
CRITICAL (9.1)
vulnerability exists in the FOXMAN-UN/UNEM server / API Gateway that if exploited an attacker could use to allow unintended commands or code to be executed on the UNEM server allowing sensitive data to be read or modified or could cause other unintended behavior
Published: 2024-06-11T13:16:29.566Z
Updated: 2024-08-01T18:56:22.575Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-2011 vulnerable 2026-06-03 14:55:28.144876 Details available
HIGH (8.6)
A heap-based buffer overflow vulnerability exists in the FOXMAN-UN/UNEM that if exploited will generally lead to a denial of service but can be used to execute arbitrary code, which is usually outside the scope of a program's implicit security policy
Published: 2024-06-11T13:24:58.764Z
Updated: 2024-08-01T18:56:22.675Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-28021 vulnerable 2026-06-03 14:55:24.907401 Details available
HIGH (7.4)
A vulnerability exists in the FOXMAN-UN/UNEM server that affects the message queueing mechanism’s certificate validation. If exploited an attacker could spoof a trusted entity causing a loss of confidentiality and integrity.
Published: 2024-06-11T13:30:12.765Z
Updated: 2024-10-29T14:27:45.146Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.