CVE-2024-54010

LowCVSS 3.4/10Last modified Sep 22, 2026

Description

A vulnerability in the firewall component of HPE Aruba Networking CX 10000 Series Switches exists. It could allow an unauthenticated adjacent attacker to conduct a packet forwarding attack against the ICMP and UDP protocol. For this attack to be successful an attacker requires a switch configuration that allows packets routing (at layer 3). Configurations that do not allow network traffic routing are not impacted. Successful exploitation could allow an attacker to bypass security policies, potentially leading to unauthorized data exposure.

Metrics

CVSS 3.1 3.4/10CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:C/C:L/I:N/A:N

Weakness enumeration

Affected software

No affected versions have been published.

Timeline

Published
Jan 8, 2025
Last modified
Sep 22, 2026
NVD status
Analyzed

Related CVEs from 2024

CVE-2024-540116.5Penetration Testing engineers at Amazon have discovered a flaw where the camera system fails to properly handle data supplied in certain reqCVE-2024-540125.3Penetration Testing engineers at Amazon discovered a vulnerability where the camera system failed to properly validate input, allowing speciCVE-2024-540138.8Penetration Testing engineers at Amazon have identified a security flaw related to request handling in the web server component that could, CVE-2024-540143.6Improper authorization in handler for custom URL scheme issue in 'Skylark' App for Android 6.2.13 and earlier and 'Skylark' App for iOS 6.2.CVE-2024-540157.5A vulnerability has been identified in SIPROTEC 5 6MD84 (CP300) (All versions < V9.90), SIPROTEC 5 6MD85 (CP300) (All versions >= V8.80 < V9CVE-2024-540164.3Improper Handling of Highly Compressed Data (Data Amplification) vulnerability in Apache Seata (incubating). This issue affects Apache SeatCVE-2024-540175.3A vulnerability has been identified in SIPROTEC 5 6MD84 (CP300) (All versions < V11.0), SIPROTEC 5 6MD85 (CP200) (All versions), SIPROTEC 5 CVE-2024-540187.2Multiple improper neutralization of special elements used in an OS Command vulnerabilities [CWE-78] in FortiSandbox before 4.4.5 allows a prCVE-2024-540196.5A improper validation of certificate with host mismatch in Fortinet FortiClientWindows version 7.4.0, versions 7.2.0 through 7.2.6, and 7.0 CVE-2024-54027.8Unquoted Search Path or Element vulnerability in ABB Mint Workbench. A local attacker who successfully exploited this vulnerability couldCVE-2024-540204.3A missing authorization in Fortinet FortiManager versions 7.2.0 through 7.2.1, and versions 7.0.0 through 7.0.7 may allow an authenticated aCVE-2024-540215.8An Improper Neutralization of CRLF Sequences in HTTP Headers ('http response splitting') vulnerability [CWE-113] in Fortinet FortiOS 7.2.0 t
CVE-2024-54010: Low severity, CVSS 3.4 | Vulnix