{"id":"CVE-2024-24782","aliases":["EUVD-2024-22160","GHSA-h29x-7wp6-7rpx"],"status":"published","title":"HIMA: Origin Validation Error in multiple products","description":"An unauthenticated attacker can send a ping request from one network to another through an error in the origin verification even though the ports are separated by VLAN.","severity":{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-12","score":0.00161,"percentile":0.05356,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-346"],"published":"2024-02-13T13:46:58Z","modified":"2026-06-17T07:14:50Z","products":[{"vendor":"hima","product":"f-com 01"},{"vendor":"hima","product":"f-com 01 coated"},{"vendor":"hima","product":"f-com_01_firmware"},{"vendor":"hima","product":"f-cpu 01"},{"vendor":"hima","product":"f-cpu 01 coated"},{"vendor":"hima","product":"f-cpu_01_firmware"},{"vendor":"hima","product":"f30 03x yy (com)"},{"vendor":"hima","product":"f30 03x yy (cpu)"},{"vendor":"hima","product":"f30_03x_yy_\\(com\\)_firmware"},{"vendor":"hima","product":"f30_03x_yy_\\(cpu\\)_firmware"},{"vendor":"hima","product":"f35 03x yy (com)"},{"vendor":"hima","product":"f35 03x yy (cpu)"},{"vendor":"hima","product":"f35_03x_yy_\\(com\\)_firmware"},{"vendor":"hima","product":"f35_03x_yy_\\(cpu\\)_firmware"},{"vendor":"hima","product":"f60 cpu 03x yy (com)"},{"vendor":"hima","product":"f60 cpu 03x yy (cpu)"},{"vendor":"hima","product":"f60_cpu_03x_yy_\\(com\\)_firmware"},{"vendor":"hima","product":"f60_cpu_03x_yy_\\(cpu\\)_firmware"},{"vendor":"hima","product":"x-com 01 e yy"},{"vendor":"hima","product":"x-com 01 yy"},{"vendor":"hima","product":"x-com_01_e_yy_firmware"},{"vendor":"hima","product":"x-com_01_yy_firmware"},{"vendor":"hima","product":"x-cpu 01"},{"vendor":"hima","product":"x-cpu 31"},{"vendor":"hima","product":"x-cpu_01_firmware"},{"vendor":"hima","product":"x-cpu_31_firmware"},{"vendor":"hima","product":"x-sb_01_firmware"}],"references":[{"url":"https://cert.vde.com/en/advisories/VDE-2024-013","tags":["x_transferred","Mitigation","Third Party Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-24782"},{"url":"https://github.com/advisories/GHSA-h29x-7wp6-7rpx"}],"sources":{"cve":[{"id":"CVE-2024-24782","title":"HIMA: Origin Validation Error in multiple products","description":"An unauthenticated attacker can send a ping request from one network to another through an error in the origin verification even though the ports are separated by VLAN.","status":"published","published":"2024-02-13T13:46:58.469Z","modified":"2025-05-08T18:21:23.443Z","cvss":[{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","level":"medium","assessor":"cna"}],"cwes":["CWE-346"],"updated_at":"2026-11-02T14:34:13.991836Z"}],"euvd":[{"id":"EUVD-2024-22160","description":"An unauthenticated attacker can send a ping request from one network to another through an error in the origin verification even though the ports are separated by VLAN.","status":"published","published":"2024-02-13T13:46:58Z","modified":"2025-05-08T18:21:23Z","cvss":[{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T20:32:51.637681Z"}],"ghsa":[{"id":"GHSA-h29x-7wp6-7rpx","title":"An unauthenticated attacker can send a ping request from one network to another through an error...","description":"An unauthenticated attacker can send a ping request from one network to another through an error in the origin verification even though the ports are separated by VLAN.","status":"published","published":"2024-02-13T15:31:12Z","modified":"2024-02-13T15:31:18Z","cvss":[{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","level":"medium"}],"cwes":["CWE-346"],"updated_at":"2026-11-02T14:55:36.780787Z"}],"nvd":[{"id":"CVE-2024-24782","description":"An unauthenticated attacker can send a ping request from one network to another through an error in the origin verification even though the ports are separated by VLAN.","status":"published","published":"2024-02-13T14:15:47.053Z","modified":"2026-06-17T07:14:50.92Z","cvss":[{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","level":"medium","assessor":"secondary"}],"cwes":["CWE-346"],"updated_at":"2026-11-02T14:09:35.738752Z"}]}}