CVE-2023-1711

A vulnerability exists in a FOXMAN-UN and UNEM logging component, it only affects systems that use remote authentication to the network elements. If exploited an attacker could obtain confidential information. List of CPEs: * cpe:2.3:a:hitachienergy:foxman_un:R9C:*:*:*:*:*:*:* * cpe:2.3:a:hitachienergy:foxman_un:R10C:*:*:*:*:*:*:* * cpe:2.3:a:hitachienergy:foxman_un:R11A:*:*:*:*:*:*:* * cpe:2.3:a:hitachienergy:foxman_un:R11B:*:*:*:*:*:*:* * cpe:2.3:a:hitachienergy:foxman_un:R14A:*:*:*:*:*:*:* * cpe:2.3:a:hitachienergy:foxman_un:R14B:*:*:*:*:*:*:* * cpe:2.3:a:hitachienergy:foxman_un:R15A:*:*:*:*:*:*:* * cpe:2.3:a:hitachienergy:foxman_un:R15B:*:*:*:*:*:*:* * cpe:2.3:a:hitachienergy:foxman_un:R16A:*:*:*:*:*:*:* * * cpe:2.3:a:hitachienergy:unem:R9C:*:*:*:*:*:*:* * cpe:2.3:a:hitachienergy: unem :R10C:*:*:*:*:*:*:* * cpe:2.3:a:hitachienergy: unem :R11A:*:*:*:*:*:*:* * cpe:2.3:a:hitachienergy: unem :R11B:*:*:*:*:*:*:* * cpe:2.3:a:hitachienergy: unem :R14A:*:*:*:*:*:*:* * cpe:2.3:a:hitachienergy: unem :R14B:*:*:*:*:*:*:* * cpe:2.3:a:hitachienergy: unem :R15A:*:*:*:*:*:*:* * cpe:2.3:a:hitachienergy: unem :R15B:*:*:*:*:*:*:* * cpe:2.3:a:hitachienergy: unem :R16A:*:*:*:*:*:*:*
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:hitachienergy:foxman_un:r9c:*:*:*:*:*:*:*
cpe:2.3:a:hitachienergy:foxman_un:r10c:*:*:*:*:*:*:*
cpe:2.3:a:hitachienergy:foxman_un:r11a:*:*:*:*:*:*:*
cpe:2.3:a:hitachienergy:foxman_un:r11b:*:*:*:*:*:*:*
cpe:2.3:a:hitachienergy:foxman_un:r14a:*:*:*:*:*:*:*
cpe:2.3:a:hitachienergy:foxman_un:r14b:*:*:*:*:*:*:*
cpe:2.3:a:hitachienergy:foxman_un:r15a:*:*:*:*:*:*:*
cpe:2.3:a:hitachienergy:foxman_un:r15b:*:*:*:*:*:*:*
cpe:2.3:a:hitachienergy:foxman_un:r16a:*:*:*:*:*:*:*
cpe:2.3:a:hitachienergy:unem:r9c:*:*:*:*:*:*:*
cpe:2.3:a:hitachienergy:unem:r10c:*:*:*:*:*:*:*
cpe:2.3:a:hitachienergy:unem:r11a:*:*:*:*:*:*:*
cpe:2.3:a:hitachienergy:unem:r11b:*:*:*:*:*:*:*
cpe:2.3:a:hitachienergy:unem:r14a:*:*:*:*:*:*:*
cpe:2.3:a:hitachienergy:unem:r14b:*:*:*:*:*:*:*
cpe:2.3:a:hitachienergy:unem:r15a:*:*:*:*:*:*:*
cpe:2.3:a:hitachienergy:unem:r15b:*:*:*:*:*:*:*
cpe:2.3:a:hitachienergy:unem:r16a:*:*:*:*:*:*:*

History

06 Jun 2023, 17:30

Type Values Removed Values Added
References (MISC) https://search.abb.com/library/Download.aspx?DocumentID=8DBD000155&LanguageCode=en&DocumentPartId=&Action=Launch - (MISC) https://search.abb.com/library/Download.aspx?DocumentID=8DBD000155&LanguageCode=en&DocumentPartId=&Action=Launch - Vendor Advisory
References (MISC) https://search.abb.com/library/Download.aspx?DocumentID=8DBD000166&LanguageCode=en&DocumentPartId=&Action=Launch - (MISC) https://search.abb.com/library/Download.aspx?DocumentID=8DBD000166&LanguageCode=en&DocumentPartId=&Action=Launch - Vendor Advisory
First Time Hitachienergy foxman Un
Hitachienergy
Hitachienergy unem
CWE CWE-116
CVSS v2 : unknown
v3 : unknown
v2 : unknown
v3 : 4.4
CPE cpe:2.3:a:hitachienergy:unem:r14b:*:*:*:*:*:*:*
cpe:2.3:a:hitachienergy:foxman_un:r15b:*:*:*:*:*:*:*
cpe:2.3:a:hitachienergy:foxman_un:r11a:*:*:*:*:*:*:*
cpe:2.3:a:hitachienergy:foxman_un:r15a:*:*:*:*:*:*:*
cpe:2.3:a:hitachienergy:unem:r11b:*:*:*:*:*:*:*
cpe:2.3:a:hitachienergy:unem:r11a:*:*:*:*:*:*:*
cpe:2.3:a:hitachienergy:unem:r9c:*:*:*:*:*:*:*
cpe:2.3:a:hitachienergy:unem:r14a:*:*:*:*:*:*:*
cpe:2.3:a:hitachienergy:unem:r15a:*:*:*:*:*:*:*
cpe:2.3:a:hitachienergy:foxman_un:r10c:*:*:*:*:*:*:*
cpe:2.3:a:hitachienergy:unem:r15b:*:*:*:*:*:*:*
cpe:2.3:a:hitachienergy:unem:r10c:*:*:*:*:*:*:*
cpe:2.3:a:hitachienergy:foxman_un:r11b:*:*:*:*:*:*:*
cpe:2.3:a:hitachienergy:foxman_un:r9c:*:*:*:*:*:*:*
cpe:2.3:a:hitachienergy:foxman_un:r14a:*:*:*:*:*:*:*
cpe:2.3:a:hitachienergy:foxman_un:r16a:*:*:*:*:*:*:*
cpe:2.3:a:hitachienergy:unem:r16a:*:*:*:*:*:*:*
cpe:2.3:a:hitachienergy:foxman_un:r14b:*:*:*:*:*:*:*

30 May 2023, 21:10

Type Values Removed Values Added
New CVE

Information

Published : 2023-05-30 19:15

Updated : 2023-12-10 15:01


NVD link : CVE-2023-1711

Mitre link : CVE-2023-1711

CVE.ORG link : CVE-2023-1711


JSON object : View

Products Affected

hitachienergy

  • unem
  • foxman_un
CWE
CWE-116

Improper Encoding or Escaping of Output

CWE-117

Improper Output Neutralization for Logs