Skip to content
OpenAdvisories
High · 7.5 CVE-2024-23766 EUVD-2024-21219GHSA-4cqv-cv9m-26q8

An issue was discovered on HMS Anybus X-Gateway AB7832-F 3 devices. The gateway exposes a web interface on port 80. An unauthenticated GET …

Published Jun 26, 2024 · Updated Mar 13, 2025 · Assigned by mitre

Description

An issue was discovered on HMS Anybus X-Gateway AB7832-F 3 devices. The gateway exposes a web interface on port 80. An unauthenticated GET request to a specific URL triggers the reboot of the Anybus gateway (or at least most of its modules). An attacker can use this feature to carry out a denial of service attack by continuously sending GET requests to that URL.

References