CVEvulnerability
CVE-2024-24781
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2024-02-13
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 7.5 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
- Weaknesses
- CWE-400
Description
An unauthenticated remote attacker can use an uncontrolled resource consumption vulnerability to DoS the affected devices through excessive traffic on a single ethernet port.
Affected configurations
• hima f30 03x yy \(com\) firmware (<= 24.14)
• hima f30 03x yy \(cpu\) firmware (<= 18.6)
• hima f35 03x yy \(com\) firmware (<= 24.14)
• hima f35 03x yy \(cpu\) firmware (<= 18.6)
• hima f60 cpu 03x yy \(com\) firmware (<= 24.14)
• hima f60 cpu 03x yy \(cpu\) firmware (<= 18.6)
• hima f-com 01 firmware (<= 14.12)
• hima f-cpu 01 firmware (<= 14.16)
• hima x-com 01 e yy firmware (<= 15.14)
• hima x-com 01 yy firmware (<= 14.12)
• hima x-cpu 01 firmware (<= 14.16)
• hima x-cpu 31 firmware (<= 14.16)
• hima x-sb 01 firmware (<= 7.54)
Related
Weakness · CWE (1)
- CWE-400 Uncontrolled Resource Consumption weakness
References
- https://cert.vde.com/en/advisories/VDE-2024-013 Mitigation, Third Party Advisory
- https://cert.vde.com/en/advisories/VDE-2024-013 Mitigation, Third Party Advisory