description: A vulnerability exists in a FOXMAN-UN and UNEM logging component, it only affects systems that use remote authentication to the network elements.
If exploited an attacker could obtain confidential information.
List of CPEs:
*  cpe:2.3:a:hitachienergy:foxman_un:R9C:*:*:*:*:*:*:*
*  cpe:2.3:a:hitachienergy:foxman_un:R10C:*:*:*:*:*:*:*
*  cpe:2.3:a:hitachienergy:foxman_un:R11A:*:*:*:*:*:*:*
*  cpe:2.3:a:hitachienergy:foxman_un:R11B:*:*:*:*:*:*:*
*  cpe:2.3:a:hitachienergy:foxman_un:R14A:*:*:*:*:*:*:*
*  cpe:2.3:a:hitachienergy:foxman_un:R14B:*:*:*:*:*:*:*
*  cpe:2.3:a:hitachienergy:foxman_un:R15A:*:*:*:*:*:*:*
*  cpe:2.3:a:hitachienergy:foxman_un:R15B:*:*:*:*:*:*:*
*  cpe:2.3:a:hitachienergy:foxman_un:R16A:*:*:*:*:*:*:*
*
*  cpe:2.3:a:hitachienergy:unem:R9C:*:*:*:*:*:*:*
*  cpe:2.3:a:hitachienergy: unem :R10C:*:*:*:*:*:*:*
*  cpe:2.3:a:hitachienergy: unem :R11A:*:*:*:*:*:*:*
*  cpe:2.3:a:hitachienergy: unem :R11B:*:*:*:*:*:*:*
*  cpe:2.3:a:hitachienergy: unem :R14A:*:*:*:*:*:*:*
*  cpe:2.3:a:hitachienergy: unem :R14B:*:*:*:*:*:*:*
*  cpe:2.3:a:hitachienergy: unem :R15A:*:*:*:*:*:*:*
*  cpe:2.3:a:hitachienergy: unem :R15B:*:*:*:*:*:*:*
*  cpe:2.3:a:hitachienergy: unem :R16A:*:*:*:*:*:*:*
problem types: CWE-117
affected:
{
defaultStatus: unaffected
product: FOXMAN-UN
vendor: Hitachi Energy
versions:
status: affected, version: FOXMAN-UN R16A
status: affected, version: FOXMAN-UN R15B
status: affected, version: FOXMAN-UN R15A
status: affected, version: FOXMAN-UN R14B
status: affected, version: FOXMAN-UN R14A
status: affected, version: FOXMAN-UN R11B
status: affected, version: FOXMAN-UN R11A
status: affected, version: FOXMAN-UN R10C
status: affected, version: FOXMAN-UN R9C
}
{
defaultStatus: unaffected
product: UNEM
vendor: Hitachi Energy
versions:
status: affected, version: UNEM R16A
status: affected, version: UNEM R15B
status: affected, version: UNEM R15A
status: affected, version: UNEM R14B
status: affected, version: UNEM R14A
status: affected, version: UNEM R11B
status: affected, version: UNEM R11A
status: affected, version: UNEM R10C
status: affected, version: UNEM R9C
}
metrics:
cvssV3_1: [
attackComplexity: HIGH
attackVector: LOCAL
availabilityImpact: NONE
baseScore: 4
baseSeverity: MEDIUM
confidentialityImpact: HIGH
integrityImpact: NONE
privilegesRequired: HIGH
scope: UNCHANGED
userInteraction: REQUIRED
vectorString: CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:U/C:H/I:N/A:N
version: 3.1
]
format: CVSS
scenarios: GENERAL
solutions: The vulnerability is remediated in FOXMAN-UN/UNEM R16B.
Please upgrade to R16B when released or apply general mitigation factors.
workarounds:
Apply mitigation as described in the cybersecurity advisory Mitigation Factors/Workarounds Section.