4.3

CVE-2024-24782

An unauthenticated attacker can send a ping request from one network to another through an error in the origin verification even though the ports are separated by VLAN.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Hima ≫ F30 03x Yy (com) Firmware Version <= 24.14
   Hima ≫ F30 03x Yy (com) Version-
Hima ≫ F30 03x Yy (cpu) Firmware Version <= 18.6
   Hima ≫ F30 03x (cpu) Yy Version-
Hima ≫ F35 03x Yy (com) Firmware Version <= 24.14
   Hima ≫ F35 03x Yy (com) Version-
Hima ≫ F35 03x Yy (cpu) Firmware Version <= 18.6
   Hima ≫ F35 03x Yy (cpu) Version-
Hima ≫ F60 Cpu 03x Yy (com) Firmware Version <= 24.14
   Hima ≫ F60 Cpu 03x Yy (com) Version-
Hima ≫ F60 Cpu 03x Yy (cpu) Firmware Version <= 18.6
   Hima ≫ F60 Cpu 03x Yy (cpu) Version-
Hima ≫ F-com 01 Firmware Version <= 14.12
   Hima ≫ F-com 01 Version-
Hima ≫ F-cpu 01 Firmware Version <= 14.16
   Hima ≫ F-cpu 01 Version-
Hima ≫ X-com 01 E Yy Firmware Version <= 15.14
   Hima ≫ X-com 01 E Yy Version-
Hima ≫ X-com 01 Yy Firmware Version <= 14.12
   Hima ≫ X-com 01 Yy Version-
Hima ≫ X-cpu 01 Firmware Version <= 14.16
   Hima ≫ X-cpu 01 Version-
Hima ≫ X-cpu 31 Firmware Version <= 14.16
   Hima ≫ X-cpu 31 Version-
Hima ≫ X-sb 01 Firmware Version <= 7.54
   Hima ≫ X-sb 01 Version-
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.03% 0.089
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
info@cert.vde.com 4.3 2.8 1.4
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
CWE-346 Origin Validation Error

The product does not properly verify that the source of data or communication is valid.

https://cert.vde.com/en/advisories/VDE-2024-013
Third Party Advisory
Mitigation