PT-2024-20558 · Hima · F-Com 01+20

Dr. Martin Floeck + 1 · Published 2024-02-13 · Updated 2024-10-18 · CVE-2024-24781

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided descriptions.

Description An unauthenticated remote attacker can exploit an uncontrolled resource consumption issue to cause a denial-of-service (DoS) condition in affected devices by sending excessive traffic to a single ethernet port.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Resource Exhaustion

Weakness Enumeration

CWE-400

Related Identifiers

CVE-2024-24781

Affected Products

F-Com 01

F-Com 01 Coated

F-Cpu 01

F-Cpu 01 Coated

F30 03X Yy

F35 03X Yy

F60 Cpu 03X Yy

X-Com 01 E Yy

X-Cpu 01

X-Cpu 31

X-Sb 01

F-Com 01 Firmware

F-Cpu 01 Firmware

F30 03X Yy (Com) Firmware

F30 03X Yy (Cpu) Firmware

F35 03X Yy (Com) Firmware

F35 03X Yy (Cpu) Firmware

F60 Cpu 03X Yy (Cpu) Firmware

X-Com 01 E Yy Firmware

X-Cpu 31 Firmware

X-Sb 01 Firmware

References · 6

• https://osv.dev/vulnerability/CVE-2024-24781 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-24781 · Security Note
• https://twitter.com/CVEnew/status/1757407805290491928 · Twitter Post
• https://twitter.com/VulmonFeeds/status/1757427911475265564 · Twitter Post
• https://cert.vde.com/en/advisories/VDE-2024-013 · Note
• https://t.me/cvenotify/98805 · Telegram Post