Hima X-CPU 31 Firmware vulnerabilities

2 CVEs affecting Hima X-CPU 31 Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2024-24782, published 2024-02-13.

More from Hima.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2024-24781, published 2024-02-13. High severity, CVSS 7.5. EPSS: 0.7% chance of exploitation in the next 30 days. An unauthenticated remote attacker can use an uncontrolled resource consumption vulnerability to DoS the affected devices through excessive traffic on a single ethernet port. 
• CVE-2024-24782, published 2024-02-13. Medium severity, CVSS 4.3. EPSS: 0.2% chance of exploitation in the next 30 days. An unauthenticated attacker can send a ping request from one network to another through an error in the origin verification even though the ports are separated by VLAN.