CVE-2024-36454

MediumCVSS 5.3/10Last modified Jun 17, 2026

Description

Use of uninitialized resource issue exists in IPCOM EX2 Series (V01L0x Series) V01L07NF0201 and earlier, and IPCOM VE2 Series V01L07NF0201 and earlier. If this vulnerability is exploited, the system may be rebooted or suspended by receiving a specially crafted packet.

Metrics

CVSS 3.1 5.3/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Weakness enumeration

CWE-908

Affected software

Vendor	Product	Versions
Fsas Technologies Inc.	IPCOM EX2 Series (V01L0x Series)	V01L07NF0201 and earlier
Fsas Technologies Inc.	IPCOM VE2 Series	V01L07NF0201 and earlier
fujitsu	ipcom_ex2_sc_3500_firmware	<= 01l07nf0201
fujitsu	ipcom_ve2_ls_plus2_220_firmware	<= 01l07nf0201

References

Timeline

Published: Jun 12, 2024
Last modified: Jun 17, 2026
NVD status: Deferred

Related CVEs from 2024

CVE-2024-364559.4An improper input validation allows an unauthenticated attacker to achieve remote command execution on the affected PAM system by sending a CVE-2024-364569.4This vulnerability allows an unauthenticated attacker to achieve remote command execution on the affected PAM system by uploading a speciall CVE-2024-364575.3The vulnerability allows an attacker to bypass the authentication requirements for a specific PAM endpoint.CVE-2024-364585.1The vulnerability allows a malicious low-privileged PAM user to perform server upgrade related actions.CVE-2024-364598.4A CRLF cross-site scripting vulnerability has been identified in certain configurations of the SiteMinder Web Agent for IIS Web Server and S CVE-2024-36467.2A command injection vulnerability was identified in GitHub Enterprise Server that allowed an attacker with an editor role in the Management CVE-2024-364608.1The front-end audit log allows viewing of unprotected plaintext passwords, where the passwords are displayed in plain text.CVE-2024-364618.8Within Zabbix, users have the ability to directly modify memory pointers in the JavaScript engine.CVE-2024-364627.5Uncontrolled resource consumption refers to a software vulnerability where a attacker or system uses excessive resources, such as CPU, memor CVE-2024-364638.8The implementation of atob in "Zabbix JS" allows to create a string with arbitrary content and use it to access internal properties of objec CVE-2024-364642.7When exporting media types, the password is exported in the YAML in plain text. This appears to be a best practices type issue and may have CVE-2024-364658.8A low privilege (regular) Zabbix user with API access can use SQL injection vulnerability in include/classes/api/CApiService.php to execute