CVE-2024-24782 - Vulnerability Details

Vendors	Products
Hima	F-com 01 F-com 01 Firmware F-cpu 01 F-cpu 01 Firmware F30 03x \(cpu\) Yy F30 03x Yy \(com\) F30 03x Yy \(com\) Firmware F30 03x Yy \(cpu\) Firmware F35 03x Yy \(com\) F35 03x Yy \(com\) Firmware F35 03x Yy \(cpu\) F35 03x Yy \(cpu\) Firmware F60 Cpu 03x Yy \(com\) F60 Cpu 03x Yy \(com\) Firmware F60 Cpu 03x Yy \(cpu\) F60 Cpu 03x Yy \(cpu\) Firmware X-com 01 E Yy X-com 01 E Yy Firmware X-com 01 Yy X-com 01 Yy Firmware X-cpu 01 X-cpu 01 Firmware X-cpu 31 X-cpu 31 Firmware X-sb 01 X-sb 01 Firmware

Link	Providers
https://cert.vde.com/en/advisories/VDE-2024-013

Type	Values Removed	Values Added
First Time appeared		Hima Hima f-com 01 Hima f-com 01 Firmware Hima f-cpu 01 Hima f-cpu 01 Firmware Hima f30 03x \(cpu\) Yy Hima f30 03x Yy \(com\) Hima f30 03x Yy \(com\) Firmware Hima f30 03x Yy \(cpu\) Firmware Hima f35 03x Yy \(com\) Hima f35 03x Yy \(com\) Firmware Hima f35 03x Yy \(cpu\) Hima f35 03x Yy \(cpu\) Firmware Hima f60 Cpu 03x Yy \(com\) Hima f60 Cpu 03x Yy \(com\) Firmware Hima f60 Cpu 03x Yy \(cpu\) Hima f60 Cpu 03x Yy \(cpu\) Firmware Hima x-com 01 E Yy Hima x-com 01 E Yy Firmware Hima x-com 01 Yy Hima x-com 01 Yy Firmware Hima x-cpu 01 Hima x-cpu 01 Firmware Hima x-cpu 31 Hima x-cpu 31 Firmware Hima x-sb 01 Hima x-sb 01 Firmware
CPEs		cpe:2.3:h:hima:f-com_01:-:::::::* cpe:2.3:h:hima:f-cpu_01:-:::::::* cpe:2.3:h:hima:f30_03x_\(cpu\)_yy:-:::::::* cpe:2.3:h:hima:f30_03x_yy_\(com\):-:::::::* cpe:2.3:h:hima:f35_03x_yy_\(com\)_:-:::::::* cpe:2.3:h:hima:f35_03x_yy_\(cpu\):-:::::::* cpe:2.3:h:hima:f60_cpu_03x_yy_\(com\):-:::::::* cpe:2.3:h:hima:f60_cpu_03x_yy_\(cpu\):-:::::::* cpe:2.3:h:hima:x-com_01_e_yy:-:::::::* cpe:2.3:h:hima:x-com_01_yy:-:::::::* cpe:2.3:h:hima:x-cpu_01:-:::::::* cpe:2.3:h:hima:x-cpu_31:-:::::::* cpe:2.3:h:hima:x-sb_01:-:::::::* cpe:2.3:o:hima:f-com_01_firmware:::::::: cpe:2.3:o:hima:f-cpu_01_firmware:::::::: cpe:2.3:o:hima:f30_03x_yy_\(com\)_firmware:::::::: cpe:2.3:o:hima:f30_03x_yy_\(cpu\)_firmware:::::::: cpe:2.3:o:hima:f35_03x_yy_\(com\)_firmware:::::::: cpe:2.3:o:hima:f35_03x_yy_\(cpu\)_firmware:::::::: cpe:2.3:o:hima:f60_cpu_03x_yy_\(com\)_firmware:::::::: cpe:2.3:o:hima:f60_cpu_03x_yy_\(cpu\)_firmware:::::::: cpe:2.3:o:hima:x-com_01_e_yy_firmware:::::::: cpe:2.3:o:hima:x-com_01_yy_firmware:::::::: cpe:2.3:o:hima:x-cpu_01_firmware:::::::: cpe:2.3:o:hima:x-cpu_31_firmware:::::::: cpe:2.3:o:hima:x-sb_01_firmware::::::::
Vendors & Products		Hima Hima f-com 01 Hima f-com 01 Firmware Hima f-cpu 01 Hima f-cpu 01 Firmware Hima f30 03x \(cpu\) Yy Hima f30 03x Yy \(com\) Hima f30 03x Yy \(com\) Firmware Hima f30 03x Yy \(cpu\) Firmware Hima f35 03x Yy \(com\) Hima f35 03x Yy \(com\) Firmware Hima f35 03x Yy \(cpu\) Hima f35 03x Yy \(cpu\) Firmware Hima f60 Cpu 03x Yy \(com\) Hima f60 Cpu 03x Yy \(com\) Firmware Hima f60 Cpu 03x Yy \(cpu\) Hima f60 Cpu 03x Yy \(cpu\) Firmware Hima x-com 01 E Yy Hima x-com 01 E Yy Firmware Hima x-com 01 Yy Hima x-com 01 Yy Firmware Hima x-cpu 01 Hima x-cpu 01 Firmware Hima x-cpu 31 Hima x-cpu 31 Firmware Hima x-sb 01 Hima x-sb 01 Firmware

Show plain JSON

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2024-24782", "assignerOrgId": "270ccfa6-a436-4e77-922e-914ec3a9685c", "state": "PUBLISHED", "assignerShortName": "CERTVDE", "dateReserved": "2024-01-30T14:47:38.518Z", "datePublished": "2024-02-13T13:46:58.469Z", "dateUpdated": "2024-08-01T23:28:12.694Z"}, "containers": {"cna": {"affected": [{"defaultStatus": "unaffected", "product": "F30 03X YY (COM)", "vendor": "HIMA", "versions": [{"lessThanOrEqual": "24.14", "status": "affected", "version": "0", "versionType": "semver"}]}, {"defaultStatus": "unaffected", "product": "F30 03X YY (CPU)", "vendor": "HIMA", "versions": [{"lessThanOrEqual": "18.6", "status": "affected", "version": "0", "versionType": "semver"}]}, {"defaultStatus": "unaffected", "product": "F35 03X YY (COM)", "vendor": "HIMA", "versions": [{"lessThanOrEqual": "24.14", "status": "affected", "version": "0", "versionType": "semver"}]}, {"defaultStatus": "unaffected", "product": "F35 03X YY (CPU)", "vendor": "HIMA", "versions": [{"lessThanOrEqual": "18.6", "status": "affected", "version": "0", "versionType": "semver"}]}, {"defaultStatus": "unaffected", "product": "F60 CPU 03X YY (COM)", "vendor": "HIMA", "versions": [{"lessThanOrEqual": "24.14", "status": "affected", "version": "0", "versionType": "semver"}]}, {"defaultStatus": "unaffected", "product": "F60 CPU 03X YY (CPU)", "vendor": "HIMA", "versions": [{"lessThanOrEqual": "18.6", "status": "affected", "version": "0", "versionType": "semver"}]}, {"defaultStatus": "unaffected", "product": "F-COM 01", "vendor": "HIMA", "versions": [{"lessThanOrEqual": "14.12", "status": "affected", "version": "0", "versionType": "semver"}]}, {"defaultStatus": "unaffected", "product": "F-COM 01 coated", "vendor": "HIMA", "versions": [{"lessThanOrEqual": "14.12", "status": "affected", "version": "0", "versionType": "semver"}]}, {"defaultStatus": "unaffected", "product": "F-CPU 01", "vendor": "HIMA", "versions": [{"lessThanOrEqual": "14.6", "status": "affected", "version": "0", "versionType": "semver"}]}, {"defaultStatus": "unaffected", "product": "F-CPU 01 coated", "vendor": "HIMA", "versions": [{"lessThanOrEqual": "14.6", "status": "affected", "version": "0", "versionType": "semver"}]}, {"defaultStatus": "unaffected", "product": "X-COM 01 E YY", "vendor": "HIMA", "versions": [{"lessThanOrEqual": "15.14", "status": "affected", "version": "0", "versionType": "semver"}]}, {"defaultStatus": "unaffected", "product": "X-COM 01 YY", "vendor": "HIMA", "versions": [{"lessThanOrEqual": "14.12", "status": "affected", "version": "0", "versionType": "semver"}]}, {"defaultStatus": "unaffected", "product": "X-CPU 01", "vendor": "HIMA", "versions": [{"lessThanOrEqual": "14.6", "status": "affected", "version": "0", "versionType": "semver"}]}, {"defaultStatus": "unaffected", "product": "X-CPU 31", "vendor": "HIMA", "versions": [{"lessThanOrEqual": "14.6", "status": "affected", "version": "0", "versionType": "semver"}]}], "datePublic": "2024-02-13T07:00:00.000Z", "descriptions": [{"lang": "en", "supportingMedia": [{"base64": false, "type": "text/html", "value": "An unauthenticated attacker can send a ping request from one network to another through an error in the origin verification even though the ports are separated by VLAN."}], "value": "An unauthenticated attacker can send a ping request from one network to another through an error in the origin verification even though the ports are separated by VLAN."}], "metrics": [{"cvssV3_1": {"attackComplexity": "LOW", "attackVector": "ADJACENT_NETWORK", "availabilityImpact": "NONE", "baseScore": 4.3, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "version": "3.1"}, "format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "problemTypes": [{"descriptions": [{"cweId": "CWE-346", "description": "CWE-346 Origin Validation Error", "lang": "en", "type": "CWE"}]}], "providerMetadata": {"orgId": "270ccfa6-a436-4e77-922e-914ec3a9685c", "shortName": "CERTVDE", "dateUpdated": "2024-02-13T13:47:58.187Z"}, "references": [{"url": "https://cert.vde.com/en/advisories/VDE-2024-013"}], "source": {"advisory": "VDE-2024-013", "defect": ["CERT@VDE#64651"], "discovery": "UNKNOWN"}, "title": "HIMA: Origin Validation Error in multiple products", "x_generator": {"engine": "Vulnogram 0.1.0-dev"}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-01T23:28:12.694Z"}, "title": "CVE Program Container", "references": [{"url": "https://cert.vde.com/en/advisories/VDE-2024-013", "tags": ["x_transferred"]}]}]}}

{

dataType : CVE_RECORD (string)

dataVersion : 5.1 (string)

cveMetadata : { »

cveId : CVE-2024-24782 (string)

assignerOrgId : 270ccfa6-a436-4e77-922e-914ec3a9685c (string)

state : PUBLISHED (string)

assignerShortName : CERTVDE (string)

dateReserved : 2024-01-30T14:47:38.518Z (string)

datePublished : 2024-02-13T13:46:58.469Z (string)

dateUpdated : 2024-08-01T23:28:12.694Z (string)

}

containers : { »

cna : { »

affected : [ »

0 : { »

defaultStatus : unaffected (string)

product : F30 03X YY (COM) (string)

vendor : HIMA (string)

versions : [ »

0 : { »

lessThanOrEqual : 24.14 (string)

status : affected (string)

version : 0 (string)

versionType : semver (string)

}

]

}

1 : { »

defaultStatus : unaffected (string)

product : F30 03X YY (CPU) (string)

vendor : HIMA (string)

versions : [ »

0 : { »

lessThanOrEqual : 18.6 (string)

status : affected (string)

version : 0 (string)

versionType : semver (string)

}

]

}

2 : { »

defaultStatus : unaffected (string)

product : F35 03X YY (COM) (string)

vendor : HIMA (string)

versions : [ »

0 : { »

lessThanOrEqual : 24.14 (string)

status : affected (string)

version : 0 (string)

versionType : semver (string)

}

]

}

3 : { »

defaultStatus : unaffected (string)

product : F35 03X YY (CPU) (string)

vendor : HIMA (string)

versions : [ »

0 : { »

lessThanOrEqual : 18.6 (string)

status : affected (string)

version : 0 (string)

versionType : semver (string)

}

]

}

4 : { »

defaultStatus : unaffected (string)

product : F60 CPU 03X YY (COM) (string)

vendor : HIMA (string)

versions : [ »

0 : { »

lessThanOrEqual : 24.14 (string)

status : affected (string)

version : 0 (string)

versionType : semver (string)

}

]

}

5 : { »

defaultStatus : unaffected (string)

product : F60 CPU 03X YY (CPU) (string)

vendor : HIMA (string)

versions : [ »

0 : { »

lessThanOrEqual : 18.6 (string)

status : affected (string)

version : 0 (string)

versionType : semver (string)

}

]

}

6 : { »

defaultStatus : unaffected (string)

product : F-COM 01 (string)

vendor : HIMA (string)

versions : [ »

0 : { »

lessThanOrEqual : 14.12 (string)

status : affected (string)

version : 0 (string)

versionType : semver (string)

}

]

}

7 : { »

defaultStatus : unaffected (string)

product : F-COM 01 coated (string)

vendor : HIMA (string)

versions : [ »

0 : { »

lessThanOrEqual : 14.12 (string)

status : affected (string)

version : 0 (string)

versionType : semver (string)

}

]

}

8 : { »

defaultStatus : unaffected (string)

product : F-CPU 01 (string)

vendor : HIMA (string)

versions : [ »

0 : { »

lessThanOrEqual : 14.6 (string)

status : affected (string)

version : 0 (string)

versionType : semver (string)

}

]

}

9 : { »

defaultStatus : unaffected (string)

product : F-CPU 01 coated (string)

vendor : HIMA (string)

versions : [ »

0 : { »

lessThanOrEqual : 14.6 (string)

status : affected (string)

version : 0 (string)

versionType : semver (string)

}

]

}

10 : { »

defaultStatus : unaffected (string)

product : X-COM 01 E YY (string)

vendor : HIMA (string)

versions : [ »

0 : { »

lessThanOrEqual : 15.14 (string)

status : affected (string)

version : 0 (string)

versionType : semver (string)

}

]

}

11 : { »

defaultStatus : unaffected (string)

product : X-COM 01 YY (string)

vendor : HIMA (string)

versions : [ »

0 : { »

lessThanOrEqual : 14.12 (string)

status : affected (string)

version : 0 (string)

versionType : semver (string)

}

]

}

12 : { »

defaultStatus : unaffected (string)

product : X-CPU 01 (string)

vendor : HIMA (string)

versions : [ »

0 : { »

lessThanOrEqual : 14.6 (string)

status : affected (string)

version : 0 (string)

versionType : semver (string)

}

]

}

13 : { »

defaultStatus : unaffected (string)

product : X-CPU 31 (string)

vendor : HIMA (string)

versions : [ »

0 : { »

lessThanOrEqual : 14.6 (string)

status : affected (string)

version : 0 (string)

versionType : semver (string)

}

]

}

]

datePublic : 2024-02-13T07:00:00.000Z (string)

descriptions : [ »

0 : { »

lang : en (string)

supportingMedia : [ »

0 : { »

base64 : false (boolean)

type : text/html (string)

value : An unauthenticated attacker can send a ping request from one network to another through an error in the origin verification even though the ports are separated by VLAN. (string)

}

]

value : An unauthenticated attacker can send a ping request from one network to another through an error in the origin verification even though the ports are separated by VLAN. (string)

}

]

metrics : [ »

0 : { »

cvssV3_1 : { »

attackComplexity : LOW (string)

attackVector : ADJACENT_NETWORK (string)

availabilityImpact : NONE (string)

baseScore : 4.3 (number)

baseSeverity : MEDIUM (string)

confidentialityImpact : LOW (string)

integrityImpact : NONE (string)

privilegesRequired : NONE (string)

scope : UNCHANGED (string)

userInteraction : NONE (string)

vectorString : CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N (string)

version : 3.1 (string)

}

format : CVSS (string)

scenarios : [ »

0 : { »

lang : en (string)

value : GENERAL (string)

}

]

}

]

problemTypes : [ »

0 : { »

descriptions : [ »

0 : { »

cweId : CWE-346 (string)

description : CWE-346 Origin Validation Error (string)

lang : en (string)

type : CWE (string)

}

]

}

]

providerMetadata : { »

orgId : 270ccfa6-a436-4e77-922e-914ec3a9685c (string)

shortName : CERTVDE (string)

dateUpdated : 2024-02-13T13:47:58.187Z (string)

}

references : [ »

0 : { »

url : https://cert.vde.com/en/advisories/VDE-2024-013 (string)

}

]

source : { »

advisory : VDE-2024-013 (string)

defect : [ »

0 : CERT@VDE#64651 (string)

]

discovery : UNKNOWN (string)

}

title : HIMA: Origin Validation Error in multiple products (string)

x_generator : { »

engine : Vulnogram 0.1.0-dev (string)

}

adp : [ »

0 : { »

providerMetadata : { »

orgId : af854a3a-2127-422b-91ae-364da2661108 (string)

shortName : CVE (string)

dateUpdated : 2024-08-01T23:28:12.694Z (string)

}

title : CVE Program Container (string)

references : [ »

0 : { »

url : https://cert.vde.com/en/advisories/VDE-2024-013 (string)

tags : [ »

0 : x_transferred (string)

]

}

]

}

]

}

Show plain JSON

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:hima:f30_03x_yy_\\(com\\)_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "4AC64894-A8A8-46D1-BAF2-A911B934A5B1", "versionEndIncluding": "24.14", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:hima:f30_03x_yy_\\(com\\):-:*:*:*:*:*:*:*", "matchCriteriaId": "37ADFAA8-A09E-4499-9BDE-16F19FBCEAA9", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:hima:f30_03x_yy_\\(cpu\\)_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "FF7BA14B-6530-4D8F-A6C3-932719A23BE0", "versionEndIncluding": "18.6", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:hima:f30_03x_\\(cpu\\)_yy:-:*:*:*:*:*:*:*", "matchCriteriaId": "59691D1B-56DC-4D6F-BB5F-B63748F3DEEC", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:hima:f35_03x_yy_\\(com\\)_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "CFA6E487-D234-4880-8046-855511B23880", "versionEndIncluding": "24.14", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:hima:f35_03x_yy_\\(com\\)_:-:*:*:*:*:*:*:*", "matchCriteriaId": "A9757960-15A6-49D5-8DC5-203B348F9C45", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:hima:f35_03x_yy_\\(cpu\\)_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "4308BD95-361E-47E3-80BC-978280F19332", "versionEndIncluding": "18.6", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:hima:f35_03x_yy_\\(cpu\\):-:*:*:*:*:*:*:*", "matchCriteriaId": "F8D2C8E0-5ABC-4A7C-A836-6E16987E3AF7", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:hima:f60_cpu_03x_yy_\\(com\\)_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "26E69E53-B34E-464C-999E-5854EE1A7EE6", "versionEndIncluding": "24.14", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:hima:f60_cpu_03x_yy_\\(com\\):-:*:*:*:*:*:*:*", "matchCriteriaId": "D684448D-B4ED-4F7D-9E17-CD98EC1CC119", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:hima:f60_cpu_03x_yy_\\(cpu\\)_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "B63B3B7E-2D66-424A-B8AB-09E4B5C91B07", "versionEndIncluding": "18.6", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:hima:f60_cpu_03x_yy_\\(cpu\\):-:*:*:*:*:*:*:*", "matchCriteriaId": "CC4F45E4-9893-4973-A58E-0B568A2DB31C", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:hima:f-com_01_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "5204C467-33AC-4E0A-9320-F417C7B3D9A7", "versionEndIncluding": "14.12", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:hima:f-com_01:-:*:*:*:*:*:*:*", "matchCriteriaId": "9CA47F7D-81AB-4F9A-85E3-4247DB3AE6E3", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:hima:f-cpu_01_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "A54AB214-9A91-4353-838A-8D00911C3B25", "versionEndIncluding": "14.16", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:hima:f-cpu_01:-:*:*:*:*:*:*:*", "matchCriteriaId": "967A94EF-86C2-4526-83E9-1E562D511D22", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:hima:x-com_01_e_yy_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "8AE3C65B-3455-4ED4-AFDF-1767DCB4DC5A", "versionEndIncluding": "15.14", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:hima:x-com_01_e_yy:-:*:*:*:*:*:*:*", "matchCriteriaId": "F86DDB9C-F65E-4319-93AA-BFD021397C81", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:hima:x-com_01_yy_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "F531B70C-1C05-47D8-86BD-649C3F118652", "versionEndIncluding": "14.12", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:hima:x-com_01_yy:-:*:*:*:*:*:*:*", "matchCriteriaId": "09FB79FD-0D7B-4E32-9E1B-B9F6E487D83B", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:hima:x-cpu_01_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "A42915E6-5D54-485D-8DA3-7CFF4D2F1887", "versionEndIncluding": "14.16", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:hima:x-cpu_01:-:*:*:*:*:*:*:*", "matchCriteriaId": "8CFADBD8-9E87-46F4-BFAD-F6AC87BA2416", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:hima:x-cpu_31_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "C4D22E5E-6FF8-44C5-8D54-75F92129E64E", "versionEndIncluding": "14.16", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:hima:x-cpu_31:-:*:*:*:*:*:*:*", "matchCriteriaId": "7DE3EBDD-0300-47B6-9B11-073AC35FD1AE", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:hima:x-sb_01_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "2A681A70-12B0-47A7-82CF-A70C270DC5B9", "versionEndIncluding": "7.54", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:hima:x-sb_01:-:*:*:*:*:*:*:*", "matchCriteriaId": "2DFF1D55-AF2C-4F47-80FE-FF3D313EBC6C", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}], "descriptions": [{"lang": "en", "value": "An unauthenticated attacker can send a ping request from one network to another through an error in the origin verification even though the ports are separated by VLAN."}, {"lang": "es", "value": "Un atacante no autenticado puede enviar una solicitud de ping de una red a otra mediante un error en la verificaci\u00f3n de origen aunque los puertos est\u00e9n separados por VLAN."}], "id": "CVE-2024-24782", "lastModified": "2024-11-21T08:59:41.467", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "ADJACENT_NETWORK", "availabilityImpact": "NONE", "baseScore": 4.3, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "version": "3.1"}, "exploitabilityScore": 2.8, "impactScore": 1.4, "source": "info@cert.vde.com", "type": "Secondary"}]}, "published": "2024-02-13T14:15:47.053", "references": [{"source": "info@cert.vde.com", "tags": ["Mitigation", "Third Party Advisory"], "url": "https://cert.vde.com/en/advisories/VDE-2024-013"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Mitigation", "Third Party Advisory"], "url": "https://cert.vde.com/en/advisories/VDE-2024-013"}], "sourceIdentifier": "info@cert.vde.com", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-346"}], "source": "info@cert.vde.com", "type": "Secondary"}]}

{

configurations : [ »

0 : { »

nodes : [ »

0 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:o:hima:f30_03x_yy_\(com\)_firmware:*:*:*:*:*:*:*:* (string)

matchCriteriaId : 4AC64894-A8A8-46D1-BAF2-A911B934A5B1 (string)

versionEndIncluding : 24.14 (string)

vulnerable : true (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

1 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:h:hima:f30_03x_yy_\(com\):-:*:*:*:*:*:*:* (string)

matchCriteriaId : 37ADFAA8-A09E-4499-9BDE-16F19FBCEAA9 (string)

vulnerable : false (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

]

operator : AND (string)

}

1 : { »

nodes : [ »

0 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:o:hima:f30_03x_yy_\(cpu\)_firmware:*:*:*:*:*:*:*:* (string)

matchCriteriaId : FF7BA14B-6530-4D8F-A6C3-932719A23BE0 (string)

versionEndIncluding : 18.6 (string)

vulnerable : true (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

1 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:h:hima:f30_03x_\(cpu\)_yy:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 59691D1B-56DC-4D6F-BB5F-B63748F3DEEC (string)

vulnerable : false (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

]

operator : AND (string)

}

2 : { »

nodes : [ »

0 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:o:hima:f35_03x_yy_\(com\)_firmware:*:*:*:*:*:*:*:* (string)

matchCriteriaId : CFA6E487-D234-4880-8046-855511B23880 (string)

versionEndIncluding : 24.14 (string)

vulnerable : true (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

1 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:h:hima:f35_03x_yy_\(com\)_:-:*:*:*:*:*:*:* (string)

matchCriteriaId : A9757960-15A6-49D5-8DC5-203B348F9C45 (string)

vulnerable : false (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

]

operator : AND (string)

}

3 : { »

nodes : [ »

0 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:o:hima:f35_03x_yy_\(cpu\)_firmware:*:*:*:*:*:*:*:* (string)

matchCriteriaId : 4308BD95-361E-47E3-80BC-978280F19332 (string)

versionEndIncluding : 18.6 (string)

vulnerable : true (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

1 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:h:hima:f35_03x_yy_\(cpu\):-:*:*:*:*:*:*:* (string)

matchCriteriaId : F8D2C8E0-5ABC-4A7C-A836-6E16987E3AF7 (string)

vulnerable : false (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

]

operator : AND (string)

}

4 : { »

nodes : [ »

0 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:o:hima:f60_cpu_03x_yy_\(com\)_firmware:*:*:*:*:*:*:*:* (string)

matchCriteriaId : 26E69E53-B34E-464C-999E-5854EE1A7EE6 (string)

versionEndIncluding : 24.14 (string)

vulnerable : true (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

1 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:h:hima:f60_cpu_03x_yy_\(com\):-:*:*:*:*:*:*:* (string)

matchCriteriaId : D684448D-B4ED-4F7D-9E17-CD98EC1CC119 (string)

vulnerable : false (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

]

operator : AND (string)

}

5 : { »

nodes : [ »

0 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:o:hima:f60_cpu_03x_yy_\(cpu\)_firmware:*:*:*:*:*:*:*:* (string)

matchCriteriaId : B63B3B7E-2D66-424A-B8AB-09E4B5C91B07 (string)

versionEndIncluding : 18.6 (string)

vulnerable : true (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

1 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:h:hima:f60_cpu_03x_yy_\(cpu\):-:*:*:*:*:*:*:* (string)

matchCriteriaId : CC4F45E4-9893-4973-A58E-0B568A2DB31C (string)

vulnerable : false (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

]

operator : AND (string)

}

6 : { »

nodes : [ »

0 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:o:hima:f-com_01_firmware:*:*:*:*:*:*:*:* (string)

matchCriteriaId : 5204C467-33AC-4E0A-9320-F417C7B3D9A7 (string)

versionEndIncluding : 14.12 (string)

vulnerable : true (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

1 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:h:hima:f-com_01:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 9CA47F7D-81AB-4F9A-85E3-4247DB3AE6E3 (string)

vulnerable : false (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

]

operator : AND (string)

}

7 : { »

nodes : [ »

0 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:o:hima:f-cpu_01_firmware:*:*:*:*:*:*:*:* (string)

matchCriteriaId : A54AB214-9A91-4353-838A-8D00911C3B25 (string)

versionEndIncluding : 14.16 (string)

vulnerable : true (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

1 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:h:hima:f-cpu_01:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 967A94EF-86C2-4526-83E9-1E562D511D22 (string)

vulnerable : false (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

]

operator : AND (string)

}

8 : { »

nodes : [ »

0 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:o:hima:x-com_01_e_yy_firmware:*:*:*:*:*:*:*:* (string)

matchCriteriaId : 8AE3C65B-3455-4ED4-AFDF-1767DCB4DC5A (string)

versionEndIncluding : 15.14 (string)

vulnerable : true (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

1 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:h:hima:x-com_01_e_yy:-:*:*:*:*:*:*:* (string)

matchCriteriaId : F86DDB9C-F65E-4319-93AA-BFD021397C81 (string)

vulnerable : false (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

]

operator : AND (string)

}

9 : { »

nodes : [ »

0 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:o:hima:x-com_01_yy_firmware:*:*:*:*:*:*:*:* (string)

matchCriteriaId : F531B70C-1C05-47D8-86BD-649C3F118652 (string)

versionEndIncluding : 14.12 (string)

vulnerable : true (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

1 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:h:hima:x-com_01_yy:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 09FB79FD-0D7B-4E32-9E1B-B9F6E487D83B (string)

vulnerable : false (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

]

operator : AND (string)

}

10 : { »

nodes : [ »

0 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:o:hima:x-cpu_01_firmware:*:*:*:*:*:*:*:* (string)

matchCriteriaId : A42915E6-5D54-485D-8DA3-7CFF4D2F1887 (string)

versionEndIncluding : 14.16 (string)

vulnerable : true (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

1 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:h:hima:x-cpu_01:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 8CFADBD8-9E87-46F4-BFAD-F6AC87BA2416 (string)

vulnerable : false (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

]

operator : AND (string)

}

11 : { »

nodes : [ »

0 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:o:hima:x-cpu_31_firmware:*:*:*:*:*:*:*:* (string)

matchCriteriaId : C4D22E5E-6FF8-44C5-8D54-75F92129E64E (string)

versionEndIncluding : 14.16 (string)

vulnerable : true (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

1 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:h:hima:x-cpu_31:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 7DE3EBDD-0300-47B6-9B11-073AC35FD1AE (string)

vulnerable : false (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

]

operator : AND (string)

}

12 : { »

nodes : [ »

0 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:o:hima:x-sb_01_firmware:*:*:*:*:*:*:*:* (string)

matchCriteriaId : 2A681A70-12B0-47A7-82CF-A70C270DC5B9 (string)

versionEndIncluding : 7.54 (string)

vulnerable : true (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

1 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:h:hima:x-sb_01:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 2DFF1D55-AF2C-4F47-80FE-FF3D313EBC6C (string)

vulnerable : false (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

]

operator : AND (string)

}

]

descriptions : [ »

0 : { »

lang : en (string)

value : An unauthenticated attacker can send a ping request from one network to another through an error in the origin verification even though the ports are separated by VLAN. (string)

}

1 : { »

lang : es (string)

value : Un atacante no autenticado puede enviar una solicitud de ping de una red a otra mediante un error en la verificación de origen aunque los puertos estén separados por VLAN. (string)

}

]

id : CVE-2024-24782 (string)

lastModified : 2024-11-21T08:59:41.467 (string)

metrics : { »

cvssMetricV31 : [ »

0 : { »

cvssData : { »

attackComplexity : LOW (string)

attackVector : ADJACENT_NETWORK (string)

availabilityImpact : NONE (string)

baseScore : 4.3 (number)

baseSeverity : MEDIUM (string)

confidentialityImpact : LOW (string)

integrityImpact : NONE (string)

privilegesRequired : NONE (string)

scope : UNCHANGED (string)

userInteraction : NONE (string)

vectorString : CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N (string)

version : 3.1 (string)

}

exploitabilityScore : 2.8 (number)

impactScore : 1.4 (number)

source : info@cert.vde.com (string)

type : Secondary (string)

}

]

}

published : 2024-02-13T14:15:47.053 (string)

references : [ »

0 : { »

source : info@cert.vde.com (string)

tags : [ »

0 : Mitigation (string)

1 : Third Party Advisory (string)

]

url : https://cert.vde.com/en/advisories/VDE-2024-013 (string)

}

1 : { »

source : af854a3a-2127-422b-91ae-364da2661108 (string)

tags : [ »

0 : Mitigation (string)

1 : Third Party Advisory (string)

]

url : https://cert.vde.com/en/advisories/VDE-2024-013 (string)

}

]

sourceIdentifier : info@cert.vde.com (string)

vulnStatus : Modified (string)

weaknesses : [ »

0 : { »

description : [ »

0 : { »

lang : en (string)

value : CWE-346 (string)

}

]

source : info@cert.vde.com (string)

type : Secondary (string)

}

]

}

Metrics

Attack Vector Adjacent Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact Low

Integrity Impact None

Availability Impact None

User Interaction None

Affected Vendors & Products

Metrics

Attack Vector Adjacent Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact Low

Integrity Impact None

Availability Impact None

User Interaction None

Affected Vendors & Products

JSON object

JSON object

JSON object

JSON object