NetSight
medium4.3

CVE-2024-24782

An unauthenticated attacker can send a ping request from one network to another through an error in the origin verification even though the ports are separated…

Impact

An unauthenticated attacker can send a ping request from one network to another through an error in the origin verification even though the ports are separated by VLAN.

Affected products

VendorProductAffected versions
HimaF30 03x Yy \(Com\) Firmware
through 24.14
HimaF30 03x Yy \(Cpu\) Firmware
through 18.6
HimaF35 03x Yy \(Com\) Firmware
through 24.14
HimaF35 03x Yy \(Cpu\) Firmware
through 18.6
HimaF60 Cpu 03x Yy \(Com\) Firmware
through 24.14
HimaF60 Cpu 03x Yy \(Cpu\) Firmware
through 18.6
HimaF-Com 01 Firmware
through 14.12
HimaF-Cpu 01 Firmware
through 14.16
HimaX-Com 01 E Yy Firmware
through 15.14
HimaX-Com 01 Yy Firmware
through 14.12
HimaX-Cpu 01 Firmware
through 14.16
HimaX-Cpu 31 Firmware
through 14.16

Weakness classification

References