7.5

CVE-2024-24781

An unauthenticated remote attacker can use an uncontrolled resource consumption vulnerability to DoS the affected devices through excessive traffic on a single ethernet port. 
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Hima ≫ F30 03x Yy (com) Firmware Version <= 24.14
   Hima ≫ F30 03x Yy (com) Version-
Hima ≫ F30 03x Yy (cpu) Firmware Version <= 18.6
   Hima ≫ F30 03x (cpu) Yy Version-
Hima ≫ F35 03x Yy (com) Firmware Version <= 24.14
   Hima ≫ F35 03x Yy (com) Version-
Hima ≫ F35 03x Yy (cpu) Firmware Version <= 18.6
   Hima ≫ F35 03x Yy (cpu) Version-
Hima ≫ F60 Cpu 03x Yy (com) Firmware Version <= 24.14
   Hima ≫ F60 Cpu 03x Yy (com) Version-
Hima ≫ F60 Cpu 03x Yy (cpu) Firmware Version <= 18.6
   Hima ≫ F60 Cpu 03x Yy (cpu) Version-
Hima ≫ F-com 01 Firmware Version <= 14.12
   Hima ≫ F-com 01 Version-
Hima ≫ F-cpu 01 Firmware Version <= 14.16
   Hima ≫ F-cpu 01 Version-
Hima ≫ X-com 01 E Yy Firmware Version <= 15.14
   Hima ≫ X-com 01 E Yy Version-
Hima ≫ X-com 01 Yy Firmware Version <= 14.12
   Hima ≫ X-com 01 Yy Version-
Hima ≫ X-cpu 01 Firmware Version <= 14.16
   Hima ≫ X-cpu 01 Version-
Hima ≫ X-cpu 31 Firmware Version <= 14.16
   Hima ≫ X-cpu 31 Version-
Hima ≫ X-sb 01 Firmware Version <= 7.54
   Hima ≫ X-sb 01 Version-
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.48% 0.64
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
info@cert.vde.com 7.5 3.9 3.6
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CWE-400 Uncontrolled Resource Consumption

The product does not properly control the allocation and maintenance of a limited resource, thereby enabling an actor to influence the amount of resources consumed, eventually leading to the exhaustion of available resources.

https://cert.vde.com/en/advisories/VDE-2024-013
Third Party Advisory
Mitigation