Vulnerabilities > CVE-2024-28022 - Improper Restriction of Excessive Authentication Attempts vulnerability in Hitachienergy Foxman-Un and Unem

Summary

A vulnerability exists in the UNEM server / APIGateway that if exploited allows a malicious user to perform an arbitrary number of authentication attempts using different passwords, and eventually gain access to other components in the same security realm using the targeted account.

Vulnerable Configurations

Common Weakness Enumeration (CWE)

• CWE-307 - Improper Restriction of Excessive Authentication Attempts

References