PT-2024-27008 · Ip Com · Ipcom Ex2 Series

Published 2024-06-12 · Updated 2025-05-14 · CVE-2024-36454

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Name of the Vulnerable Software and Affected Versions IPCOM EX2 Series versions V01L07NF0201 and earlier IPCOM VE2 Series versions V01L07NF0201 and earlier

Description The issue is related to the use of an uninitialized resource. If exploited, it may cause the system to reboot or suspend by receiving a specially crafted packet.

Recommendations For IPCOM EX2 Series versions V01L07NF0201 and earlier, update to a version later than V01L07NF0201 to resolve the issue. For IPCOM VE2 Series versions V01L07NF0201 and earlier, update to a version later than V01L07NF0201 to resolve the issue.

Fix

LPE

Use of Uninitialized Resource

Weakness Enumeration

CWE-908

Related Identifiers

CVE-2024-36454

Affected Products

Ipcom Ex2 Series

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2024-36454 · Security Note
• https://t.me/cvenotify/82950 · Telegram Post
• https://fujitsu.com/jp/products/network/support/2024/ipcom-02 · Note
• https://jvn.jp/en/jp/JVN25594256 · Note
• https://twitter.com/dailycve/status/1922446555673469209 · Twitter Post