CVE-2024-24782

HIMA: Origin Validation Error in multiple products

State
Published
Severity
4.3 Medium
Published
Feb 13, 2024
Updated
May 8, 2025
Reserved
Jan 30, 2024

Read the record on cve.org

Description

An unauthenticated attacker can send a ping request from one network to another through an error in the origin verification even though the ports are separated by VLAN.

Scores

CVSSScoreVectorSource
3.14.3 MediumCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:NCERTVDE

Weaknesses

Affected Products

ProductVersions
F30 03X YY (COM)HIMA
  • 24.14 and earlierAffected
F30 03X YY (CPU)HIMA
  • 18.6 and earlierAffected
F35 03X YY (COM)HIMA
  • 24.14 and earlierAffected
F35 03X YY (CPU)HIMA
  • 18.6 and earlierAffected
F60 CPU 03X YY (COM)HIMA
  • 24.14 and earlierAffected
F60 CPU 03X YY (CPU)HIMA
  • 18.6 and earlierAffected
F-COM 01HIMA
  • 14.12 and earlierAffected
F-COM 01 coatedHIMA
  • 14.12 and earlierAffected
F-CPU 01HIMA
  • 14.6 and earlierAffected
F-CPU 01 coatedHIMA
  • 14.6 and earlierAffected
X-COM 01 E YYHIMA
  • 15.14 and earlierAffected
X-COM 01 YYHIMA
  • 14.12 and earlierAffected
X-CPU 01HIMA
  • 14.6 and earlierAffected
X-CPU 31HIMA
  • 14.6 and earlierAffected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.