CVE-2024-36454

Severity: medium (CVSS 5.3 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.5% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2024-06-12 · updated 2026-06-17
Weakness: CWE-908

Description

Use of uninitialized resource issue exists in IPCOM EX2 Series (V01L0x Series) V01L07NF0201 and earlier, and IPCOM VE2 Series V01L07NF0201 and earlier. If this vulnerability is exploited, the system may be rebooted or suspended by receiving a specially crafted packet.

Affected products

Fujitsu Ipcom Ex2 In 3200 Firmware: through 01l07nf0201
Fujitsu Ipcom Ve2 Ls Plus 100 Firmware: through 01l07nf0201

References

https://jvn.jp/en/jp/JVN25594256/
https://www.fujitsu.com/jp/products/network/support/2024/ipcom-02/
https://jvn.jp/en/jp/JVN25594256/
https://www.fujitsu.com/jp/products/network/support/2024/ipcom-02/

Get alerted when CVE-2024-36454 or the next vulnerability affects your stack