CVE-2023-1711

MediumCVSS 4.4/10Last modified Jun 17, 2026

Description

A vulnerability exists in a FOXMAN-UN and UNEM logging component, it only affects systems that use remote authentication to the network elements. If exploited an attacker could obtain confidential information.

List of CPEs: * cpe:2.3:a:hitachienergy:foxman_un:R9C:*:*:*:*:*:*:* * cpe:2.3:a:hitachienergy:foxman_un:R10C:*:*:*:*:*:*:*

* cpe:2.3:a:hitachienergy:foxman_un:R11A:*:*:*:*:*:*:*

* cpe:2.3:a:hitachienergy:foxman_un:R11B:*:*:*:*:*:*:*

* cpe:2.3:a:hitachienergy:foxman_un:R14A:*:*:*:*:*:*:*

* cpe:2.3:a:hitachienergy:foxman_un:R14B:*:*:*:*:*:*:*

* cpe:2.3:a:hitachienergy:foxman_un:R15A:*:*:*:*:*:*:*

* cpe:2.3:a:hitachienergy:foxman_un:R15B:*:*:*:*:*:*:*

* cpe:2.3:a:hitachienergy:foxman_un:R16A:*:*:*:*:*:*:*

* * cpe:2.3:a:hitachienergy:unem:R9C:*:*:*:*:*:*:* * cpe:2.3:a:hitachienergy: unem :R10C:*:*:*:*:*:*:*

* cpe:2.3:a:hitachienergy: unem :R11A:*:*:*:*:*:*:*

* cpe:2.3:a:hitachienergy: unem :R11B:*:*:*:*:*:*:*

* cpe:2.3:a:hitachienergy: unem :R14A:*:*:*:*:*:*:*

* cpe:2.3:a:hitachienergy: unem :R14B:*:*:*:*:*:*:*

* cpe:2.3:a:hitachienergy: unem :R15A:*:*:*:*:*:*:*

* cpe:2.3:a:hitachienergy: unem :R15B:*:*:*:*:*:*:*

* cpe:2.3:a:hitachienergy: unem :R16A:*:*:*:*:*:*:*

Metrics

CVSS 3.1 4.4/10CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-117CWE-116

Affected software

No affected versions have been published.

Timeline

Published
May 30, 2023
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2023

CVE-2023-17129.8Use of Hard-coded, Security-relevant Constants in GitHub repository deepset-ai/haystack prior to 0.1.30.CVE-2023-17138.8Insecure temporary file creation in bitrix/modules/crm/lib/order/import/instagram.php in Bitrix24 22.0.300 hosted on Apache HTTP Server alloCVE-2023-17148.8Unsafe variable extraction in bitrix/modules/main/classes/general/user_options.php in Bitrix24 22.0.300 allows remote authenticated attackerCVE-2023-17155.4A logic error when using mb_strpos() to check for potential XSS payload in Bitrix24 22.0.300 allows attackers to bypass XSS sanitisation viaCVE-2023-17169.6Cross-site scripting (XSS) vulnerability in Invoice Edit Page in Bitrix24 22.0.300 allows attackers to execute arbitrary JavaScript code in CVE-2023-17179.6Prototype pollution in bitrix/templates/bitrix24/components/bitrix/menu/left_vertical/script.js in Bitrix24 22.0.300 allows remote attackersCVE-2023-17187.5Improper file stream access in /desktop_app/file.ajax.php?action=uploadfile in Bitrix24 22.0.300 allows unauthenticated remote attackers to CVE-2023-17199.8Global variable extraction in bitrix/modules/main/tools.php in Bitrix24 22.0.300 allows unauthenticated remote attackers to (1) enumerate atCVE-2023-17208.0Lack of mime type response header in Bitrix24 22.0.300 allows authenticated remote attackers to execute arbitrary JavaScript code in the vicCVE-2023-17217.2Yoga Class Registration System version 1.0 allows an administrator to execute commands on the server. This is possible because the applicatiCVE-2023-17228.8Yoga Class Registration System version 1.0 allows an administrator to execute commands on the server. This is possible because the applicatiCVE-2023-17239.8Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Veragroup Mobile Assistant allows SQL
CVE-2023-1711: Medium severity, CVSS 4.4 | Vulnix