Description
An unauthenticated attacker can send a ping request from one network to another through an error in the origin verification even though the ports are separated by VLAN.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| HIMA | F30 03X YY (COM) | ≤ 24.14 | — |
| HIMA | F30 03X YY (CPU) | ≤ 18.6 | — |
| HIMA | F35 03X YY (COM) | ≤ 24.14 | — |
| HIMA | F35 03X YY (CPU) | ≤ 18.6 | — |
| HIMA | F60 CPU 03X YY (COM) | ≤ 24.14 | — |
| HIMA | F60 CPU 03X YY (CPU) | ≤ 18.6 | — |
| HIMA | F-COM 01 | ≤ 14.12 | — |
| HIMA | F-COM 01 coated | ≤ 14.12 | — |
| HIMA | F-CPU 01 | ≤ 14.6 | — |
| HIMA | F-CPU 01 coated | ≤ 14.6 | — |
| HIMA | X-COM 01 E YY | ≤ 15.14 | — |
| HIMA | X-COM 01 YY | ≤ 14.12 | — |
| HIMA | X-CPU 01 | ≤ 14.6 | — |
| HIMA | X-CPU 31 | ≤ 14.6 | — |
Advisories 1
- VDE-2024-013 HIMA: Multiple products affected by DoS and Port-Based-VLAN Crossing CERT@VDE · May 22, 2025