Products
HMS Anybus X-Gateway AB7832-F
Source
cve@mitre.org
Tags
CVE-2024-23766 details
Published : June 26, 2024, 9:15 p.m.
Last Modified : June 26, 2024, 9:15 p.m.
Last Modified : June 26, 2024, 9:15 p.m.
Description
An issue was discovered on HMS Anybus X-Gateway AB7832-F 3 devices. The gateway exposes a web interface on port 80. An unauthenticated GET request to a specific URL triggers the reboot of the Anybus gateway (or at least most of its modules). An attacker can use this feature to carry out a denial of service attack by continuously sending GET requests to that URL.
CVSS Score
| 1 | 2 | 3 | 4 | 5 | 6 | 7 | 8 | 9 | 10 |
|---|
Weakness
| Weakness | Name | Description |
|---|
References
| URL | Source |
|---|---|
| https://sensepost.com/blog/2024/targeting-an-industrial-protocol-gateway/ | cve@mitre.org |
This website uses the NVD API, but is not approved or certified by it.