PT-2023-8824 · Unem+1 · Unem+1

Published

2023-05-30

·

Updated

2024-07-25

·

CVE-2023-1711

CVSS v3.1

4.4

Medium

VectorAV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions FOXMAN-UN versions R9C through R16A UNEM versions R9C through R16A
Description A vulnerability exists in the FOXMAN-UN and UNEM logging component, affecting systems that use remote authentication to the network elements. If exploited, an attacker could obtain confidential information. The issue is related to a lack of proper encoding or escaping of output data, allowing a remote attacker to access confidential data.
Recommendations For FOXMAN-UN versions R9C through R16A, consider disabling the logging component until a patch is available. For UNEM versions R9C through R16A, restrict access to the logging component to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Improper Encoding or Escaping of Output

Weakness Enumeration

CWE-117CWE-116

Related Identifiers

BDU:2024-02092
CVE-2023-1711

Affected Products

Foxmann-Un
Unem