{"id":"CVE-2024-2012","aliases":["EUVD-2024-26982","GHSA-73c8-ph6w-g64x"],"status":"published","title":"vulnerability exists in the FOXMAN-UN/UNEM server / API Gateway that if exploited an attacker...","description":"vulnerability exists in the FOXMAN-UN/UNEM server / API Gateway that if exploited an attacker could use to allow unintended commands or \ncode to be executed on the UNEM server allowing sensitive data to \nbe read or modified or could cause other unintended behavior","severity":{"version":"3.1","score":9.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H","level":"critical","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-07","score":0.00601,"percentile":0.48996,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-288"],"published":"2024-06-11T13:16:29Z","modified":"2026-06-17T07:23:33Z","products":[{"vendor":"hitachi energy","product":"foxman-un"},{"vendor":"hitachi energy","product":"unem"},{"vendor":"hitachienergy","product":"foxman-un"},{"vendor":"hitachienergy","product":"foxman_un"},{"vendor":"hitachienergy","product":"unem"}],"references":[{"url":"https://publisher.hitachienergy.com/preview?DocumentId=8DBD000201\u0026languageCode=en\u0026Preview=true","tags":["x_transferred","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-2012"},{"url":"https://github.com/advisories/GHSA-73c8-ph6w-g64x"}],"sources":{"cve":[{"id":"CVE-2024-2012","description":"vulnerability exists in the FOXMAN-UN/UNEM server / API Gateway that if exploited an attacker could use to allow unintended commands or \ncode to be executed on the UNEM server allowing sensitive data to \nbe read or modified or could cause other unintended behavior","status":"published","published":"2024-06-11T13:16:29.566Z","modified":"2024-08-01T18:56:22.575Z","cvss":[{"version":"3.1","score":9.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H","level":"critical","assessor":"cna"}],"cwes":["CWE-288"],"updated_at":"2026-11-02T14:34:10.258163Z"}],"euvd":[{"id":"EUVD-2024-26982","description":"vulnerability exists in the FOXMAN-UN/UNEM server / API Gateway that if exploited an attacker could use to allow unintended commands or \ncode to be executed on the UNEM server allowing sensitive data to \nbe read or modified or could cause other unintended behavior","status":"published","published":"2024-06-11T13:16:29Z","modified":"2024-08-01T18:56:22Z","cvss":[{"version":"3.1","score":9.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-03T03:50:40.972877Z"}],"ghsa":[{"id":"GHSA-73c8-ph6w-g64x","title":"vulnerability exists in the FOXMAN-UN/UNEM server / API Gateway that if exploited an attacker...","description":"vulnerability exists in the FOXMAN-UN/UNEM server / API Gateway that if exploited an attacker could use to allow unintended commands or \ncode to be executed on the UNEM server allowing sensitive data to \nbe read or modified or could cause other unintended behavior","status":"published","published":"2024-06-11T15:31:14Z","modified":"2024-06-11T15:31:26Z","cvss":[{"version":"3.1","score":9.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H","level":"critical"}],"cwes":["CWE-288"],"updated_at":"2026-11-02T14:57:27.679011Z"}],"nvd":[{"id":"CVE-2024-2012","description":"vulnerability exists in the FOXMAN-UN/UNEM server / API Gateway that if exploited an attacker could use to allow unintended commands or \ncode to be executed on the UNEM server allowing sensitive data to \nbe read or modified or could cause other unintended behavior","status":"published","published":"2024-06-11T14:15:11.273Z","modified":"2026-06-17T07:23:33.473Z","cvss":[{"version":"3.1","score":9.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H","level":"critical","assessor":"secondary"},{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary"}],"cwes":["CWE-288"],"updated_at":"2026-11-02T14:10:04.804473Z"}]}}