PT-2024-20068 · Hms · Hms Anybus X-Gateway Ab7832-F 3

Published 2024-06-26 · Updated 2024-11-14 · CVE-2024-23765

Positive Technologies (AI Summary)

CVSS v3.1

4.0

Medium

Base vector

AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Name of the Vulnerable Software and Affected Versions HMS Anybus X-Gateway AB7832-F 3

Description An issue was discovered where the gateway exposes an unidentified service on port 7412 on the network. After sending 85 requests to this port, all the network services of the gateway become unresponsive. The content and length of the frame do not matter, and the device needs to be restarted to resume operations.

Recommendations For HMS Anybus X-Gateway AB7832-F 3, as a temporary workaround, consider restricting access to port 7412 to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2024-23765

Affected Products

Hms Anybus X-Gateway Ab7832-F 3

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2024-23765 · Security Note
• https://sensepost.com/blog/2024/targeting-an-industrial-protocol-gateway · Note
• https://t.me/cvenotify/84578 · Telegram Post