ByteOS Network

NVD Vulnerability Details :

CVE-2024-24782

Analyzed

Source-info@cert.vde.com

Published At-13 Feb, 2024 | 14:15

Updated At-18 Oct, 2024 | 19:01

An unauthenticated attacker can send a ping request from one network to another through an error in the origin verification even though the ports are separated by VLAN.

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Primary	3.1	4.3	MEDIUM	CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

CPE Matches

hima>>f30_03x_yy_\(com\)_firmware>>Versions up to 24.14(inclusive)

cpe:2.3:o:hima:f30_03x_yy_\(com\)_firmware:*:*:*:*:*:*:*:*

hima>>f30_03x_yy_\(com\)>>-

cpe:2.3:h:hima:f30_03x_yy_\(com\):-:*:*:*:*:*:*:*

hima>>f30_03x_yy_\(cpu\)_firmware>>Versions up to 18.6(inclusive)

cpe:2.3:o:hima:f30_03x_yy_\(cpu\)_firmware:*:*:*:*:*:*:*:*

hima>>f30_03x_\(cpu\)_yy>>-

cpe:2.3:h:hima:f30_03x_\(cpu\)_yy:-:*:*:*:*:*:*:*

hima>>f35_03x_yy_\(com\)_firmware>>Versions up to 24.14(inclusive)

cpe:2.3:o:hima:f35_03x_yy_\(com\)_firmware:*:*:*:*:*:*:*:*

hima>>f35_03x_yy_\(com\)_>>-

cpe:2.3:h:hima:f35_03x_yy_\(com\)_:-:*:*:*:*:*:*:*

hima>>f35_03x_yy_\(cpu\)_firmware>>Versions up to 18.6(inclusive)

cpe:2.3:o:hima:f35_03x_yy_\(cpu\)_firmware:*:*:*:*:*:*:*:*

hima>>f35_03x_yy_\(cpu\)>>-

cpe:2.3:h:hima:f35_03x_yy_\(cpu\):-:*:*:*:*:*:*:*

hima>>f60_cpu_03x_yy_\(com\)_firmware>>Versions up to 24.14(inclusive)

cpe:2.3:o:hima:f60_cpu_03x_yy_\(com\)_firmware:*:*:*:*:*:*:*:*

hima>>f60_cpu_03x_yy_\(com\)>>-

cpe:2.3:h:hima:f60_cpu_03x_yy_\(com\):-:*:*:*:*:*:*:*

hima>>f60_cpu_03x_yy_\(cpu\)_firmware>>Versions up to 18.6(inclusive)

cpe:2.3:o:hima:f60_cpu_03x_yy_\(cpu\)_firmware:*:*:*:*:*:*:*:*

hima>>f60_cpu_03x_yy_\(cpu\)>>-

cpe:2.3:h:hima:f60_cpu_03x_yy_\(cpu\):-:*:*:*:*:*:*:*

hima>>f-com_01_firmware>>Versions up to 14.12(inclusive)

cpe:2.3:o:hima:f-com_01_firmware:*:*:*:*:*:*:*:*

hima>>f-com_01>>-

cpe:2.3:h:hima:f-com_01:-:*:*:*:*:*:*:*

hima>>f-cpu_01_firmware>>Versions up to 14.16(inclusive)

cpe:2.3:o:hima:f-cpu_01_firmware:*:*:*:*:*:*:*:*

hima>>f-cpu_01>>-

cpe:2.3:h:hima:f-cpu_01:-:*:*:*:*:*:*:*

hima>>x-com_01_e_yy_firmware>>Versions up to 15.14(inclusive)

cpe:2.3:o:hima:x-com_01_e_yy_firmware:*:*:*:*:*:*:*:*

hima>>x-com_01_e_yy>>-

cpe:2.3:h:hima:x-com_01_e_yy:-:*:*:*:*:*:*:*

hima>>x-com_01_yy_firmware>>Versions up to 14.12(inclusive)

cpe:2.3:o:hima:x-com_01_yy_firmware:*:*:*:*:*:*:*:*

hima>>x-com_01_yy>>-

cpe:2.3:h:hima:x-com_01_yy:-:*:*:*:*:*:*:*

hima>>x-cpu_01_firmware>>Versions up to 14.16(inclusive)

cpe:2.3:o:hima:x-cpu_01_firmware:*:*:*:*:*:*:*:*

hima>>x-cpu_01>>-

cpe:2.3:h:hima:x-cpu_01:-:*:*:*:*:*:*:*

hima>>x-cpu_31_firmware>>Versions up to 14.16(inclusive)

cpe:2.3:o:hima:x-cpu_31_firmware:*:*:*:*:*:*:*:*

hima>>x-cpu_31>>-

cpe:2.3:h:hima:x-cpu_31:-:*:*:*:*:*:*:*

hima>>x-sb_01_firmware>>Versions up to 7.54(inclusive)

cpe:2.3:o:hima:x-sb_01_firmware:*:*:*:*:*:*:*:*

hima>>x-sb_01>>-

cpe:2.3:h:hima:x-sb_01:-:*:*:*:*:*:*:*

Weaknesses

CWE ID	Type	Source
CWE-346	Primary	info@cert.vde.com

References

Hyperlink	Source	Resource
https://cert.vde.com/en/advisories/VDE-2024-013	info@cert.vde.com	Mitigation Third Party Advisory

CISA Catalog

Metrics

CPE Matches

Weaknesses

Evaluator Description

Evaluator Impact

Evaluator Solution

Vendor Statements

References

Change History