What’s Vulnerable › Vulnerabilities

CVE-2024-24781: Hima: Uncontrolled Resource Consumption in multiple products

• Severity: high (CVSS 7.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.7% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2024-02-13 · updated 2026-06-17
• Weakness: CWE-400

Description

An unauthenticated remote attacker can use an uncontrolled resource consumption vulnerability to DoS the affected devices through excessive traffic on a single ethernet port.

Affected products

• HIMA F-Com 01 Firmware: through 14.12
• HIMA F-Cpu 01 Firmware: through 14.16
• HIMA F30 03X Yy (Com) Firmware: through 24.14
• HIMA F30 03X Yy (Cpu) Firmware: through 18.6
• HIMA F35 03X Yy (Com) Firmware: through 24.14
• HIMA F35 03X Yy (Cpu) Firmware: through 18.6
• HIMA F60 Cpu 03X Yy (Com) Firmware: through 24.14
• HIMA F60 Cpu 03X Yy (Cpu) Firmware: through 18.6
• HIMA X-Com 01 E Yy Firmware: through 15.14
• HIMA X-Com 01 Yy Firmware: through 14.12
• HIMA X-Cpu 01 Firmware: through 14.16
• HIMA X-Cpu 31 Firmware: through 14.16
• HIMA X-Sb 01 Firmware: through 7.54

References

• https://cert.vde.com/en/advisories/VDE-2024-013
• https://cert.vde.com/en/advisories/VDE-2024-013

Get alerted when CVE-2024-24781 or the next vulnerability affects your stack