CVE-2022-3928CWE-798

Hardcoded credential is found in the message queue

High · published January 5, 2023

CVSS v3.1
7.1
EPSS
0%
Percentile
11.5
In the wild
Unconfirmed
What it is

Hardcoded credential is found in affected products' message queue. An attacker that manages to exploit this vulnerability will be able to access data to the internal message queue.

This issue affects

* FOXMAN-UN product: FOXMAN-UN R15B, FOXMAN-UN R15A, FOXMAN-UN R14B, FOXMAN-UN R14A, FOXMAN-UN R11B, FOXMAN-UN R11A, FOXMAN-UN R10C, FOXMAN-UN R9C;

* UNEM product: UNEM R15B, UNEM R15A, UNEM R14B, UNEM R14A, UNEM R11B, UNEM R11A, UNEM R10C, UNEM R9C.

List of CPEs:

* cpe:2.3:a:hitachienergy:foxman-un:R15B:*:*:*:*:*:*:*

* cpe:2.3:a:hitachienergy:foxman-un:R15A:*:*:*:*:*:*:*

* cpe:2.3:a:hitachienergy:foxman-un:R14B:*:*:*:*:*:*:*

* cpe:2.3:a:hitachienergy:foxman-un:R14A:*:*:*:*:*:*:*

* cpe:2.3:a:hitachienergy:foxman-un:R11B:*:*:*:*:*:*:*

* cpe:2.3:a:hitachienergy:foxman-un:R11A:*:*:*:*:*:*:*

* cpe:2.3:a:hitachienergy:foxman-un:R10C:*:*:*:*:*:*:*

* cpe:2.3:a:hitachienergy:foxman-un:R9C:*:*:*:*:*:*:*

* cpe:2.3:a:hitachienergy:unem:R15B:*:*:*:*:*:*:*

* cpe:2.3:a:hitachienergy:unem:R15A:*:*:*:*:*:*:*

* cpe:2.3:a:hitachienergy:unem:R14B:*:*:*:*:*:*:*

* cpe:2.3:a:hitachienergy:unem:R14A:*:*:*:*:*:*:*

* cpe:2.3:a:hitachienergy:unem:R11B:*:*:*:*:*:*:*

* cpe:2.3:a:hitachienergy:unem:R11A:*:*:*:*:*:*:*

* cpe:2.3:a:hitachienergy:unem:R10C:*:*:*:*:*:*:*

* cpe:2.3:a:hitachienergy:unem:R9C:*:*:*:*:*:*:*

The record
Technical detail
CVSS v3.1
7.1 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00217 · 11.5th percentile
Weakness
CWE-798 · Use of Hard-coded Credentials
Published
2023-01-05T21:50Z
EPSS history
Timeline
  • 05 JAN 21:50Z
    Hardcoded credential is found in the message queue
    cvelistv5