What’s Vulnerable › Vulnerabilities

CVE-2024-24782: HIMA: Origin Validation Error in multiple products

• Severity: medium (CVSS 4.3 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2024-02-13 · updated 2026-06-17
• Weakness: CWE-346

Description

An unauthenticated attacker can send a ping request from one network to another through an error in the origin verification even though the ports are separated by VLAN.

Affected products

• HIMA F-Com 01 Firmware: through 14.12
• HIMA F-Cpu 01 Firmware: through 14.16
• HIMA F30 03X Yy (Com) Firmware: through 24.14
• HIMA F30 03X Yy (Cpu) Firmware: through 18.6
• HIMA F35 03X Yy (Com) Firmware: through 24.14
• HIMA F35 03X Yy (Cpu) Firmware: through 18.6
• HIMA F60 Cpu 03X Yy (Com) Firmware: through 24.14
• HIMA F60 Cpu 03X Yy (Cpu) Firmware: through 18.6
• HIMA X-Com 01 E Yy Firmware: through 15.14
• HIMA X-Com 01 Yy Firmware: through 14.12
• HIMA X-Cpu 01 Firmware: through 14.16
• HIMA X-Cpu 31 Firmware: through 14.16
• HIMA X-Sb 01 Firmware: through 7.54

References

• https://cert.vde.com/en/advisories/VDE-2024-013
• https://cert.vde.com/en/advisories/VDE-2024-013

Get alerted when CVE-2024-24782 or the next vulnerability affects your stack