What is CVE-2022-3927?

CVE-2022-3927 is a high-severity vulnerability in Hitachi Energy Foxman-un, classified under Use of Hard-coded Credentials. CVSS score: 8.0/10. Published 2023-01-05.

How severe is CVE-2022-3927?

High severity. CVSS v3 base score is 8.0 out of 10.

Vulnerability in Hitachi Energy Foxman-un

CVE-2022-3927

The affected products store both public and private key that are used to sign and protect Custom Parameter Set (CPS) file from modification. An attacker that manages to exploit this vulnerability will be able to change the CPS file, sign…

EPSS: 0.006 (42.8th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 8.0 (High). Vector: CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H.

Affected products

Hitachi Energy Foxman-un — versions FOXMAN-UN R16A, FOXMAN-UN R15B, FOXMAN-UN R15A
Hitachi Energy Unem — versions UNEM R16A, UNEM R15B, UNEM R15A
Hitachienergy Foxman-un
Hitachienergy Unem

Weakness classification (CWE)

CWE-798 — Use of Hard-coded Credentials

References

cybersecurity@hitachienergy.com (Mitigation, Vendor Advisory)
cybersecurity@hitachienergy.com (Mitigation, Vendor Advisory)

Frequently asked questions

What is CVE-2022-3927?: CVE-2022-3927 is a high-severity vulnerability in Hitachi Energy Foxman-un, classified under Use of Hard-coded Credentials. CVSS score: 8.0/10. Published 2023-01-05.
How severe is CVE-2022-3927?: High severity. CVSS v3 base score is 8.0 out of 10.