Vulnerability · Published Jun 11, 2024 · Assigned by Hitachi Energy

CVE-2024-2461

Medium 6.9

In plain English

A medium-severity security flaw in FOX61x from Hitachi Energy. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.5% (higher than 43% of all known vulnerabilities).

Severity (CVSS 4.0)6.9Medium
Exploit odds (30 days)0.5%top 57.1% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known

Official description

If exploited an attacker could traverse the file system to access files or directories that would otherwise be inaccessible

Affected products (as reported)

VendorProductVersions
Hitachi Energy FOX61x 0 – through FOX61x R16B Revision E (cesm3_r16b04_02, cesne_r16b04_02 and f10ne_r16b04_02)FOX61x R15BFOX61x R16AFOX61x R15A
Hitachi Energy XMC20 0 – through XMC20 R16B Revision C (cent2_r16b04_02, co5ne_r16b04_02)XMC20 R15BXMC20 R16AXMC20 R15A

Weakness: CWE-23 · Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N

References