Communication between the client and server partially using CORBA over TCP/IP

CVE-2022-3929

Summary

The vulnerability arises from the use of CORBA (Common Object Request Broker Architecture) for client-server communications in Hitachi Energy's FOXMAN-UN and UNEM products. This architecture operates over TCP/IP without encryption, potentially allowing malicious actors to trace internal messages. As a result, sensitive information could be intercepted, posing a significant risk to system integrity and confidentiality.

References