CVE-2024-2011
EUVD-2024-2698111.06.2024, 14:15
A heap-based buffer overflow vulnerability exists in the FOXMAN-UN/UNEM that if exploited will generally lead to a denial of service but can be used to execute arbitrary code, which is usually outside the scope of a program's implicit security policyEnginsight
Early Detection
Affected products identified ahead of NVD analysis through intelligence sources.
| Vendor | Product | Version | Source |
|---|---|---|---|
| hitachi_energy | foxman-un | FOXMAN-UN R16B PC3 ≤ 𝑥 ≤ FOXMAN-UN R16B PC4 | ADP |
| hitachi_energy | unem | UNEM R16B PC3 ≤ 𝑥 ≤ UNEM R16B PC4 | ADP |
Common Weakness Enumeration
- CWE-122 - Heap-based Buffer OverflowA heap overflow condition is a buffer overflow, where the buffer that can be overwritten is allocated in the heap portion of memory, generally meaning that the buffer was allocated using a routine such as malloc().
- CWE-787 - Out-of-bounds WriteThe software writes data past the end, or before the beginning, of the intended buffer.
References