CVE-2024-24781

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

An unauthenticated remote attacker can use an uncontrolled resource consumption vulnerability to DoS the affected devices through excessive traffic on a single ethernet port.

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-400

Affected software

Vendor	Product	Versions
HIMA	F30 03X YY (COM)	<= 24.14
HIMA	F30 03X YY (CPU)	<= 18.6
HIMA	F35 03X YY (COM)	<= 24.14
HIMA	F35 03X YY (CPU)	<= 18.6
HIMA	F60 CPU 03X YY (COM)	<= 24.14
HIMA	F60 CPU 03X YY (CPU)	<= 18.6
HIMA	F-COM 01	<= 14.12
HIMA	F-COM 01 coated	<= 14.12
HIMA	F-CPU 01	<= 14.6
HIMA	F-CPU 01 coated	<= 14.6
HIMA	X-COM 01 E YY	<= 15.14
HIMA	X-COM 01 YY	<= 14.12
HIMA	X-CPU 01	<= 14.6
HIMA	X-CPU 31	<= 14.6
HIMA	X-SB 01	<= 7.54

References

https://cert.vde.com/en/advisories/VDE-2024-013Mitigation, Third Party Advisory
https://cert.vde.com/en/advisories/VDE-2024-013Mitigation, Third Party Advisory

Timeline

Published: Feb 13, 2024
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2024

CVE-2024-247824.3An unauthenticated attacker can send a ping request from one network to another through an error in the origin verification even though the CVE-2024-247835.9Verifying a certificate chain which contains a certificate with an unknown public key algorithm will cause Certificate.Verify to panic. This CVE-2024-247847.5The ParseAddressList function incorrectly handles comments (text within parentheses) within display names. Since this is a misalignment with CVE-2024-247855.4If errors returned from MarshalJSON methods contain user controlled data, they may be used to break the contextual auto-escaping behavior of CVE-2024-247867.5The protojson.Unmarshal function can enter an infinite loop when unmarshaling certain forms of invalid JSON. This condition can occur when u CVE-2024-247876.4On Darwin, building a Go module which contains CGO can trigger arbitrary code execution when using the Apple version of ld, due to usage of CVE-2024-247885.9A malformed DNS message in response to a query can cause the Lookup functions to get stuck in an infinite loop.CVE-2024-247895.5The archive/zip package's handling of certain types of invalid zip files differs from the behavior of most zip implementations. This misalig CVE-2024-24793.5A vulnerability classified as problematic has been found in MHA Sistemas arMHAzena 9.6.0.0. This affects an unknown part of the component Ca CVE-2024-247909.8The various Is methods (IsPrivate, IsLoopback, etc) did not work as expected for IPv4-mapped IPv6 addresses, returning false for addresses w CVE-2024-247917.5The net/http HTTP/1.1 client mishandled the case where a server responds to a request with an "Expect: 100-continue" header with a non-infor CVE-2024-247927.5Parsing a corrupt or malicious image with invalid color indices can cause a panic.