Skip to content
OpenAdvisories
High VDE-2024-013 2 CVEs

HIMA: Multiple products affected by DoS and Port-Based-VLAN Crossing

Published Feb 13, 2024 · Updated May 22, 2025 · Revision 2

Vendor: HIMA Product: F-COM 01 Product: F-COM 01 coated Product: F-CPU 01 Product: F-CPU 01 coated Product: F30 03X YY (COM) all variants Product: F30 03X YY (CPU) all variants Product: F35 03X YY (COM) all variants Product: F35 03X YY (CPU) all variants Product: F60 CPU 03X YY (COM) all variants Product: F60 CPU 03X YY (CPU) all variants Product: X-COM 01 E YY all variants Product: X-COM 01 YY all variants Product: X-CPU 01 Product: X-CPU 31 Product: X-SB 01

Summary

CVE-2024-24781: If the above mentioned products are loaded with Wire speed (1Gbit/s or 100Mbit/s) the resources of the Ethernet-Controller are exhausted and it must be reset by the system automatically after load disappears. This leads to an interruption (DoS) of all other communications of the affected Ethernet-Controller.

CVE-2024-24782: Most of the above mentioned products offer a VLAN feature. This helps to segregate ports of the switch included in each of the products. VLAN are meant to segregate networks. Furthermore a MAC-learning mode called 'conservative' is provided. In this mode the ARP table is updated earliest within 1..2 times ARP aging time.

X-SB 01 (985210207) is not affected by this CVE.

Details

Impact
Please consult the above CVEs.

Mitigation
CVE-2024-24781: All load limiting measures are helpful (e.g. in external devices or also in the switch of the above mentioned products). Please check whether the reduced speed is still sufficient for the desired application. Protect the network with segregation measures and restrict the access of unauthorized network participants (e.g. close unused ports)

CVE-2024-24782: Switching the MAC-learning from 'conservative' to 'tolerant' mitigates the above described vulnerability but leads to potential IP-Spoofing and ARP-Poisoning and should therefore be avoided. HIMax and HIQuad X systems can be setup in the way that real physical segregation (between different modules) is used. E.g. it is impossible to ping from one X-COM to another X-COM in the same Rack. HIMatrix should be used in that way that CPU and COM are NOT connected via VLAN e.g. CPU connected to Port 1 and 2, COM Connected to Port 3 and 4.

Vulnerabilities 2

  • High 7.5
    CVE-2024-24781

    Hima: Uncontrolled Resource Consumption in multiple products

    An unauthenticated remote attacker can use an uncontrolled resource consumption vulnerability to DoS the affected devices through excessive traffic on a single ethernet port. 

    HIMA X-CPU 31 F-COM 01 F-CPU 01
  • Medium 4.3
    CVE-2024-24782

    HIMA: Origin Validation Error in multiple products

    An unauthenticated attacker can send a ping request from one network to another through an error in the origin verification even though the ports are separated by VLAN.

    HIMA X-CPU 31 F-COM 01 F-CPU 01

Revision history

  1. #2

    Fix: quotation mark

  2. #1

    Initial revision.

References