---
cve: "CVE-2024-2012"
severity: "CRITICAL"
cvss: 9.1
epss: "60%"
vendor: "Hitachi Energy"
kev: false
exploited: false
published: "2024-06-11 14:15:11"
tags: [cve, security, critical]
source: tsecurity.de CVE-Dossier
exported: "2026-09-10T09:42:30+02:00"
---

# CVE-2024-2012

> 9.1 CRITICAL

## Beschreibung

vulnerability exists in the FOXMAN-UN/UNEM server / API Gateway that if exploited an attacker could use to allow unintended commands or 
code to be executed on the UNEM server allowing sensitive data to 
be read or modified or could cause other unintended behavior

## CVSS-Vektor

```
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
```

| Metrik | Wert | Bewertung |
|---|---|---|
| AV Angriffsvektor | Netzwerk | bad |
| AC Komplexität | Gering | bad |
| PR Privilegien | Hoch | good |
| UI Interaktion | Keine | bad |
| S Scope | Verändert | bad |
| C Vertraulichkeit | Hoch | bad |
| I Integrität | Hoch | bad |
| A Verfügbarkeit | Hoch | bad |

## Referenzen

- <https://publisher.hitachienergy.com/preview?DocumentId=8DBD000201&languageCode=en&Preview=true>

---
_Exportiert aus dem [tsecurity.de CVE-Dossier](https://tsecurity.de/cve?cve=CVE-2024-2012) · Datenquellen: EUVD (ENISA), NVD, OSV, CISA KEV, FIRST EPSS, Exploit-DB, BSI BITS_