CVE-2024-23766
June 26, 2024, 9:15 p.m.
Tags
Product(s) Impacted
HMS Anybus X-Gateway AB7832-F
Description
An issue was discovered on HMS Anybus X-Gateway AB7832-F 3 devices. The gateway exposes a web interface on port 80. An unauthenticated GET request to a specific URL triggers the reboot of the Anybus gateway (or at least most of its modules). An attacker can use this feature to carry out a denial of service attack by continuously sending GET requests to that URL.
Weaknesses
Date
Published: June 26, 2024, 9:15 p.m.
Last Modified: June 26, 2024, 9:15 p.m.
Status : Received
CVE has been recently published to the CVE List and has been received by the NVD.
More infoSource
cve@mitre.org
References
https://sensepost.com/
cve@mitre.org