CVE-2022-3927
The affected products store public and private key that are used to sign and protect custom parameter set files from modification.
The affected products store both public and private key that are used to sign and protect Custom Parameter Set (CPS) file from modification. An attacker that manages to exploit this vulnerability will be able to change the CPS file, sign it so that it is trusted as the legitimate CPS file.
This issue affects
- FOXMAN-UN product: FOXMAN-UN R15B, FOXMAN-UN R15A, FOXMAN-UN R14B, FOXMAN-UN R14A, FOXMAN-UN R11B, FOXMAN-UN R11A, FOXMAN-UN R10C, FOXMAN-UN R9C;
- UNEM product: UNEM R15B, UNEM R15A, UNEM R14B, UNEM R14A, UNEM R11B, UNEM R11A, UNEM R10C, UNEM R9C.
List of CPEs:
-
cpe:2.3:a:hitachienergy:foxman-un:R15B:::::::*
-
cpe:2.3:a:hitachienergy:foxman-un:R15A:::::::*
-
cpe:2.3:a:hitachienergy:foxman-un:R14B:::::::*
-
cpe:2.3:a:hitachienergy:foxman-un:R14A:::::::*
-
cpe:2.3:a:hitachienergy:foxman-un:R11B:::::::*
-
cpe:2.3:a:hitachienergy:foxman-un:R11A:::::::*
-
cpe:2.3:a:hitachienergy:foxman-un:R10C:::::::*
-
cpe:2.3:a:hitachienergy:foxman-un:R9C:::::::*
-
cpe:2.3:a:hitachienergy:unem:R15B:::::::*
-
cpe:2.3:a:hitachienergy:unem:R15A:::::::*
-
cpe:2.3:a:hitachienergy:unem:R14B:::::::*
-
cpe:2.3:a:hitachienergy:unem:R14A:::::::*
-
cpe:2.3:a:hitachienergy:unem:R11B:::::::*
-
cpe:2.3:a:hitachienergy:unem:R11A:::::::*
-
cpe:2.3:a:hitachienergy:unem:R10C:::::::*
-
cpe:2.3:a:hitachienergy:unem:R9C:::::::*
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- High
- Privileges needed
- High
- User interaction
- None
What an attacker can affect
- Confidentiality
- High
- Integrity
- High
- Availability
- High
Exploit likelihood
What each source reports
CVE List Score used
The affected products store public and private key that are used to sign and protect custom parameter set files from modification.
The affected products store both public and private key that are used to sign and protect Custom Parameter Set (CPS) file from modification. An attacker that manages to exploit this vulnerability will be able to change the CPS file, sign it so that it is trusted as the legitimate CPS file.
This issue affects
- FOXMAN-UN product: FOXMAN-UN R15B, FOXMAN-UN R15A, FOXMAN-UN R14B, FOXMAN-UN R14A, FOXMAN-UN R11B, FOXMAN-UN R11A, FOXMAN-UN R10C, FOXMAN-UN R9C;
- UNEM product: UNEM R15B, UNEM R15A, UNEM R14B, UNEM R14A, UNEM R11B, UNEM R11A, UNEM R10C, UNEM R9C.
List of CPEs:
-
cpe:2.3:a:hitachienergy:foxman-un:R15B:::::::*
-
cpe:2.3:a:hitachienergy:foxman-un:R15A:::::::*
-
cpe:2.3:a:hitachienergy:foxman-un:R14B:::::::*
-
cpe:2.3:a:hitachienergy:foxman-un:R14A:::::::*
-
cpe:2.3:a:hitachienergy:foxman-un:R11B:::::::*
-
cpe:2.3:a:hitachienergy:foxman-un:R11A:::::::*
-
cpe:2.3:a:hitachienergy:foxman-un:R10C:::::::*
-
cpe:2.3:a:hitachienergy:foxman-un:R9C:::::::*
-
cpe:2.3:a:hitachienergy:unem:R15B:::::::*
-
cpe:2.3:a:hitachienergy:unem:R15A:::::::*
-
cpe:2.3:a:hitachienergy:unem:R14B:::::::*
-
cpe:2.3:a:hitachienergy:unem:R14A:::::::*
-
cpe:2.3:a:hitachienergy:unem:R11B:::::::*
-
cpe:2.3:a:hitachienergy:unem:R11A:::::::*
-
cpe:2.3:a:hitachienergy:unem:R10C:::::::*
-
cpe:2.3:a:hitachienergy:unem:R9C:::::::*
- Record
CVE-2022-3927- CVSS 3.1
- 8.0 High
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H - Weakness
- CWE-798
- Updated
- 2026-11-02
EUVDEUVD-2022-43261
The affected products store both public and private key that are used to sign and protect Custom Parameter Set (CPS) file from modification. An attacker that manages to exploit this vulnerability will be able to change the CPS file, sign it so that it is trusted as the legitimate CPS file.
This issue affects
- FOXMAN-UN product: FOXMAN-UN R15B, FOXMAN-UN R15A, FOXMAN-UN R14B, FOXMAN-UN R14A, FOXMAN-UN R11B, FOXMAN-UN R11A, FOXMAN-UN R10C, FOXMAN-UN R9C;
- UNEM product: UNEM R15B, UNEM R15A, UNEM R14B, UNEM R14A, UNEM R11B, UNEM R11A, UNEM R10C, UNEM R9C.
List of CPEs:
-
cpe:2.3:a:hitachienergy:foxman-un:R15B:::::::*
-
cpe:2.3:a:hitachienergy:foxman-un:R15A:::::::*
-
cpe:2.3:a:hitachienergy:foxman-un:R14B:::::::*
-
cpe:2.3:a:hitachienergy:foxman-un:R14A:::::::*
-
cpe:2.3:a:hitachienergy:foxman-un:R11B:::::::*
-
cpe:2.3:a:hitachienergy:foxman-un:R11A:::::::*
-
cpe:2.3:a:hitachienergy:foxman-un:R10C:::::::*
-
cpe:2.3:a:hitachienergy:foxman-un:R9C:::::::*
-
cpe:2.3:a:hitachienergy:unem:R15B:::::::*
-
cpe:2.3:a:hitachienergy:unem:R15A:::::::*
-
cpe:2.3:a:hitachienergy:unem:R14B:::::::*
-
cpe:2.3:a:hitachienergy:unem:R14A:::::::*
-
cpe:2.3:a:hitachienergy:unem:R11B:::::::*
-
cpe:2.3:a:hitachienergy:unem:R11A:::::::*
-
cpe:2.3:a:hitachienergy:unem:R10C:::::::*
-
cpe:2.3:a:hitachienergy:unem:R9C:::::::*
- Record
EUVD-2022-43261- CVSS 3.1
- 8.0 High
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H - Updated
- 2026-11-02
GitHub AdvisoriesGHSA-q6ff-9vgw-842x
The affected products store both public and private key that are used to sign and protect Custom...
The affected products store both public and private key that are used to sign and protect Custom Parameter Set (CPS) file from modification. An attacker that manages to exploit this vulnerability will be able to change the CPS file, sign it so that it is trusted as the legitimate CPS file. This issue affects * FOXMAN-UN product: FOXMAN-UN R15B, FOXMAN-UN R15A, FOXMAN-UN R14B, FOXMAN-UN R14A, FOXMAN-UN R11B, FOXMAN-UN R11A, FOXMAN-UN R10C, FOXMAN-UN R9C; * UNEM product: UNEM R15B, UNEM R15A, UNEM R14B, UNEM R14A, UNEM R11B, UNEM R11A, UNEM R10C, UNEM R9C. List of CPEs: * cpe:2.3:a:hitachienergy:foxman-un:R15B:::::::* * cpe:2.3:a:hitachienergy:foxman-un:R15A:::::::* * cpe:2.3:a:hitachienergy:foxman-un:R14B:::::::* * cpe:2.3:a:hitachienergy:foxman-un:R14A:::::::* * cpe:2.3:a:hitachienergy:foxman-un:R11B:::::::* * cpe:2.3:a:hitachienergy:foxman-un:R11A:::::::* * cpe:2.3:a:hitachienergy:foxman-un:R10C:::::::* * cpe:2.3:a:hitachienergy:foxman-un:R9C:::::::* * cpe:2.3:a:hitachienergy:unem:R15B:::::::* * cpe:2.3:a:hitachienergy:unem:R15A:::::::* * cpe:2.3:a:hitachienergy:unem:R14B:::::::* * cpe:2.3:a:hitachienergy:unem:R14A:::::::* * cpe:2.3:a:hitachienergy:unem:R11B:::::::* * cpe:2.3:a:hitachienergy:unem:R11A:::::::* * cpe:2.3:a:hitachienergy:unem:R10C:::::::* * cpe:2.3:a:hitachienergy:unem:R9C:::::::*
- Record
GHSA-q6ff-9vgw-842x- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Weakness
- CWE-798
- Updated
- 2026-11-02
NVD
The affected products store both public and private key that are used to sign and protect Custom Parameter Set (CPS) file from modification. An attacker that manages to exploit this vulnerability will be able to change the CPS file, sign it so that it is trusted as the legitimate CPS file.
This issue affects
- FOXMAN-UN product: FOXMAN-UN R15B, FOXMAN-UN R15A, FOXMAN-UN R14B, FOXMAN-UN R14A, FOXMAN-UN R11B, FOXMAN-UN R11A, FOXMAN-UN R10C, FOXMAN-UN R9C;
- UNEM product: UNEM R15B, UNEM R15A, UNEM R14B, UNEM R14A, UNEM R11B, UNEM R11A, UNEM R10C, UNEM R9C.
List of CPEs:
-
cpe:2.3:a:hitachienergy:foxman-un:R15B:::::::*
-
cpe:2.3:a:hitachienergy:foxman-un:R15A:::::::*
-
cpe:2.3:a:hitachienergy:foxman-un:R14B:::::::*
-
cpe:2.3:a:hitachienergy:foxman-un:R14A:::::::*
-
cpe:2.3:a:hitachienergy:foxman-un:R11B:::::::*
-
cpe:2.3:a:hitachienergy:foxman-un:R11A:::::::*
-
cpe:2.3:a:hitachienergy:foxman-un:R10C:::::::*
-
cpe:2.3:a:hitachienergy:foxman-un:R9C:::::::*
-
cpe:2.3:a:hitachienergy:unem:R15B:::::::*
-
cpe:2.3:a:hitachienergy:unem:R15A:::::::*
-
cpe:2.3:a:hitachienergy:unem:R14B:::::::*
-
cpe:2.3:a:hitachienergy:unem:R14A:::::::*
-
cpe:2.3:a:hitachienergy:unem:R11B:::::::*
-
cpe:2.3:a:hitachienergy:unem:R11A:::::::*
-
cpe:2.3:a:hitachienergy:unem:R10C:::::::*
-
cpe:2.3:a:hitachienergy:unem:R9C:::::::*
- Record
CVE-2022-3927- CVSS 3.1
- 8.0 High
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H - CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Weakness
- CWE-798
- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | CVE List, EUVD, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2022-3927 is a high vulnerability (CVSS 8.0) in Hitachi Energy Foxman-un, published January 5, 2023. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.61%, the 49th percentile. No source names a fixed version.