ZeroHour
DashboardNewsCVEsExploitsIncidentsAIBriefAnalyticsEntitiesWatchlistIOCsAsk the feedSourcesFeeds & APIKiosk mode

CVE-2024-24782

—
CVSS 3.1
4.3 medium
EPSS
<1%p6
Published
()
Modified
Description

An unauthenticated attacker can send a ping request from one network to another through an error in the origin verification even though the ports are separated by VLAN.

Vendors
hima
Products
f30 03x yy \(com\) firmware, f30 03x yy \(cpu\) firmware, f35 03x yy \(com\) firmware, f35 03x yy \(cpu\) firmware, f60 cpu 03x yy \(com\) firmware, f60 cpu 03x yy \(cpu\) firmware, f-com 01 firmware, f-cpu 01 firmware, x-com 01 e yy firmware, x-com 01 yy firmware, x-cpu 01 firmware, x-cpu 31 firmware
Weakness
CWE-346
Vector
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
NVD CVE.org GitHub PoCs EPSS (0.2%)

In the news

No ingested article mentions this CVE yet.