VDE-2024-013 — HIMA: Multiple products affected by DoS and Port-Based-VLAN Crossing

Tue, 13 Feb 2024 07:00:00 +0000

CVE-2024-24781: If the above mentioned products are loaded with Wire speed (1Gbit/s or 100Mbit/s) the resources of the Ethernet-Controller are exhausted and it must be reset by the system automatically after load disappears. This leads to an interruption (DoS) of all other communications of the affected Ethernet-Controller.

CVE-2024-24782: Most of the above mentioned products offer a VLAN feature. This helps to segregate ports of the switch included in each of the products. VLAN are meant to segregate networks. Furthermore a MAC-learning mode called 'conservative' is provided. In this mode the ARP table is updated earliest within 1..2 times ARP aging time.

X-SB 01 (985210207) is not affected by this CVE.

VDE-2022-059 — HIMA: unquoted path vulnerabilities in X-OPC and X-OTS

Mon, 16 Jan 2023 09:00:00 +0000

Unquoted Windows search path vulnerability in the below mentioned Software for Windows might allow local users to gain privileges via a malicious .exe file.

Most recent entries from csaf_himapaulhildebrandtgmbh

VDE-2024-013 — HIMA: Multiple products affected by DoS and Port-Based-VLAN Crossing

VDE-2022-059 — HIMA: unquoted path vulnerabilities in X-OPC and X-OTS