Vulnerabilities > CVE-2024-28022 - Improper Restriction of Excessive Authentication Attempts vulnerability in Hitachienergy Foxman-Un and Unem

047910
CVSS 5.6 - MEDIUM
Attack vector
NETWORK
Attack complexity
HIGH
Privileges required
NONE
Confidentiality impact
LOW
Integrity impact
LOW
Availability impact
LOW
network
high complexity
hitachienergy
CWE-307

Summary

A vulnerability exists in the FOXMAN-UN/UNEM server / APIGateway that if exploited allows a malicious user to perform an arbitrary number of authentication attempts using different passwords, and eventually gain access to the targeted account.