What is CVE-2022-3929?

CVE-2022-3929 is a high-severity vulnerability in Hitachi Energy Foxman-Un, classified under Cleartext Transmission of Sensitive Information. CVSS score: 8.3/10. Published 2023-01-05.

How severe is CVE-2022-3929?

High severity. CVSS v3 base score is 8.3 out of 10.

Vulnerability in Hitachi Energy Foxman-Un

CVE-2022-3929

Communication between the client and the server application of the affected products is partially done using CORBA (Common Object Request Broker Architecture) over TCP/IP. This protocol is not encrypted and allows tracing of internal messages. This issue affects * FOXMAN-UN product: FOXMAN-UN R15B, FOXMAN-UN R15A, FOXMAN-UN R14B, FOXMAN-UN R14A, FOXMAN-UN R11B, FOXMAN-UN R11A, FOXMAN-UN R10C, FOXMAN-UN R9C; * UNEM product: UNEM R15B, UNEM R15A, UNEM R14B, UNEM R14A, UNEM R11B, UNEM R11A, UNEM R10C, UNEM R9C. List of CPEs: * cpe:2.3:a:hitachienergy:foxman-un:R15B:*:*:*:*:*:*:* * cpe:2.3:a:hitachienergy:foxman-un:R15A:*:*:*:*:*:*:* * cpe:2.3:a:hitachienergy:foxman-un:R14B:*:*:*:*:*:*:* * cpe:2.3:a:hitachienergy:foxman-un:R14A:*:*:*:*:*:*:* * cpe:2.3:a:hitachienergy:foxman-un:R11B:*:*:*:*:*:*:* * cpe:2.3:a:hitachienergy:foxman-un:R11A:*:*:*:*:*:*:* * cpe:2.3:a:hitachienergy:foxman-un:R10C:*:*:*:*:*:*:* * cpe:2.3:a:hitachienergy:foxman-un:R9C:*:*:*:*:*:*:* * cpe:2.3:a:hitachienergy:unem:R15B:*:*:*:*:*:*:* * cpe:2.3:a:hitachienergy:unem:R15A:*:*:*:*:*:*:* * cpe:2.3:a:hitachienergy:unem:R14B:*:*:*:*:*:*:* * cpe:2.3:a:hitachienergy:unem:R14A:*:*:*:*:*:*:* * cpe:2.3:a:hitachienergy:unem:R11B:*:*:*:*:*:*:* * cpe:2.3:a:hitachienergy:unem:R11A:*:*:*:*:*:*:* * cpe:2.3:a:hitachienergy:unem:R10C:*:*:*:*:*:*:* * cpe:2.3:a:hitachienergy:unem:R9C:*:*:*:*:*:*:*

EPSS: 0.004 (31.5th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 8.3 (High). Vector: CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H.

Affected products

Hitachi Energy Foxman-un — versions FOXMAN-UN R16A, FOXMAN-UN R15B, FOXMAN-UN R15A
Hitachi Energy Unem — versions UNEM R16A, UNEM R15B, UNEM R15A
Hitachienergy Foxman-un
Hitachienergy Unem

Weakness classification (CWE)

CWE-319 — Cleartext Transmission of Sensitive Information

References

cybersecurity@hitachienergy.com (Mitigation, Vendor Advisory)
cybersecurity@hitachienergy.com (Mitigation, Vendor Advisory)

Frequently asked questions

What is CVE-2022-3929?: CVE-2022-3929 is a high-severity vulnerability in Hitachi Energy Foxman-Un, classified under Cleartext Transmission of Sensitive Information. CVSS score: 8.3/10. Published 2023-01-05.
How severe is CVE-2022-3929?: High severity. CVSS v3 base score is 8.3 out of 10.