HIGH · 7.5

CVE-2024-24781

An unauthenticated remote attacker can use an uncontrolled resource consumption vulnerability to DoS the affected devices through excessive traffic on a single ethernet port. 

Vulnerability Description

An unauthenticated remote attacker can use an uncontrolled resource consumption vulnerability to DoS the affected devices through excessive traffic on a single ethernet port. 

CVSS Score

7.5

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
NONE
Integrity
NONE
Availability
HIGH

Affected Products

VendorProductVersions
HimaF30 03X Yy \(Com\) Firmware<= 24.14
HimaF30 03X Yy \(Com\)-
HimaF30 03X Yy \(Cpu\) Firmware<= 18.6
HimaF30 03X \(Cpu\) Yy-
HimaF35 03X Yy \(Com\) Firmware<= 24.14
HimaF35 03X Yy \(Com\) -
HimaF35 03X Yy \(Cpu\) Firmware<= 18.6
HimaF35 03X Yy \(Cpu\)-
HimaF60 Cpu 03X Yy \(Com\) Firmware<= 24.14
HimaF60 Cpu 03X Yy \(Com\)-
HimaF60 Cpu 03X Yy \(Cpu\) Firmware<= 18.6
HimaF60 Cpu 03X Yy \(Cpu\)-
HimaF-Com 01 Firmware<= 14.12
HimaF-Com 01-
HimaF-Cpu 01 Firmware<= 14.16
HimaF-Cpu 01-
HimaX-Com 01 E Yy Firmware<= 15.14
HimaX-Com 01 E Yy-
HimaX-Com 01 Yy Firmware<= 14.12
HimaX-Com 01 Yy-

Related Weaknesses (CWE)

References

FAQ

What is CVE-2024-24781?

CVE-2024-24781 is a vulnerability with a CVSS score of 7.5 (HIGH). An unauthenticated remote attacker can use an uncontrolled resource consumption vulnerability to DoS the affected devices through excessive traffic on a single ethernet port. 

How severe is CVE-2024-24781?

CVE-2024-24781 has been rated HIGH with a CVSS base score of 7.5/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2024-24781?

Check the references section above for vendor advisories and patch information. Affected products include: Hima F30 03X Yy \(Com\) Firmware, Hima F30 03X Yy \(Com\), Hima F30 03X Yy \(Cpu\) Firmware, Hima F30 03X \(Cpu\) Yy, Hima F35 03X Yy \(Com\) Firmware.