Hima: Uncontrolled Resource Consumption in multiple products
Priority MEDIUM 40CWE-400Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- None
- Attack complexity
- Low
- Impact type
- Denial of service
- Confidentiality · integrity · availability
- None · None · High
- Fix status
- No fix listed
Attack profile from CVSS 3.1 · CNA. Fix status from CNA. Impact type from CWE-400.
Summary
An unauthenticated remote attacker can use an uncontrolled resource consumption vulnerability to DoS the affected devices through excessive traffic on a single ethernet port.
Why it matters now
Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00718 54th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- None
- Automatable
- Yes
- Technical impact
- Partial
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| HIMA | F30 03X YY (COM) | up to 24.14 | — | No fix listed | CNA |
| HIMA | F30 03X YY (CPU) | up to 18.6 | — | No fix listed | CNA |
| HIMA | F35 03X YY (COM) | up to 24.14 | — | No fix listed | CNA |
| HIMA | F35 03X YY (CPU) | up to 18.6 | — | No fix listed | CNA |
| HIMA | F60 CPU 03X YY (COM) | up to 24.14 | — | No fix listed | CNA |
| HIMA | F60 CPU 03X YY (CPU) | up to 18.6 | — | No fix listed | CNA |
| HIMA | F-COM 01 | up to 14.12 | — | No fix listed | CNA |
| HIMA | F-COM 01 coated | up to 14.12 | — | No fix listed | CNA |
| HIMA | F-CPU 01 | up to 14.6 | — | No fix listed | CNA |
| HIMA | F-CPU 01 coated | up to 14.6 | — | No fix listed | CNA |
| HIMA | X-COM 01 E YY | up to 15.14 | — | No fix listed | CNA |
| HIMA | X-COM 01 YY | up to 14.12 | — | No fix listed | CNA |
| HIMA | X-CPU 01 | up to 14.6 | — | No fix listed | CNA |
| HIMA | X-CPU 31 | up to 14.6 | — | No fix listed | CNA |
| HIMA | X-SB 01 | up to 7.54 | — | No fix listed | CNA |
- F30 03X YY (COM) VendorHIMA Affected up to 24.14 Fixed in — No fix listed CNA
- F30 03X YY (CPU) VendorHIMA Affected up to 18.6 Fixed in — No fix listed CNA
- F35 03X YY (COM) VendorHIMA Affected up to 24.14 Fixed in — No fix listed CNA
- F35 03X YY (CPU) VendorHIMA Affected up to 18.6 Fixed in — No fix listed CNA
- F60 CPU 03X YY (COM) VendorHIMA Affected up to 24.14 Fixed in — No fix listed CNA
- F60 CPU 03X YY (CPU) VendorHIMA Affected up to 18.6 Fixed in — No fix listed CNA
- F-COM 01 VendorHIMA Affected up to 14.12 Fixed in — No fix listed CNA
- F-COM 01 coated VendorHIMA Affected up to 14.12 Fixed in — No fix listed CNA
- F-CPU 01 VendorHIMA Affected up to 14.6 Fixed in — No fix listed CNA
- F-CPU 01 coated VendorHIMA Affected up to 14.6 Fixed in — No fix listed CNA
- X-COM 01 E YY VendorHIMA Affected up to 15.14 Fixed in — No fix listed CNA
- X-COM 01 YY VendorHIMA Affected up to 14.12 Fixed in — No fix listed CNA
- X-CPU 01 VendorHIMA Affected up to 14.6 Fixed in — No fix listed CNA
- X-CPU 31 VendorHIMA Affected up to 14.6 Fixed in — No fix listed CNA
- X-SB 01 VendorHIMA Affected up to 7.54 Fixed in — No fix listed CNA
CPE configurations NVD · 26
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:hima:f30_03x_yy_\(com\)_firmware:*:*:*:*:*:*:*:* | up to 24.14 | Vulnerable | HIMA |
| cpe:2.3:h:hima:f30_03x_yy_\(com\):-:*:*:*:*:*:*:* | not specified by NVD | Running on | HIMA |
| cpe:2.3:o:hima:f30_03x_yy_\(cpu\)_firmware:*:*:*:*:*:*:*:* | up to 18.6 | Vulnerable | HIMA |
| cpe:2.3:h:hima:f30_03x_\(cpu\)_yy:-:*:*:*:*:*:*:* | not specified by NVD | Running on | HIMA |
| cpe:2.3:o:hima:f35_03x_yy_\(com\)_firmware:*:*:*:*:*:*:*:* | up to 24.14 | Vulnerable | HIMA |
| cpe:2.3:h:hima:f35_03x_yy_\(com\)_:-:*:*:*:*:*:*:* | not specified by NVD | Running on | HIMA |
| cpe:2.3:o:hima:f35_03x_yy_\(cpu\)_firmware:*:*:*:*:*:*:*:* | up to 18.6 | Vulnerable | HIMA |
| cpe:2.3:h:hima:f35_03x_yy_\(cpu\):-:*:*:*:*:*:*:* | not specified by NVD | Running on | HIMA |
| cpe:2.3:o:hima:f60_cpu_03x_yy_\(com\)_firmware:*:*:*:*:*:*:*:* | up to 24.14 | Vulnerable | HIMA |
| cpe:2.3:h:hima:f60_cpu_03x_yy_\(com\):-:*:*:*:*:*:*:* | not specified by NVD | Running on | HIMA |
- cpe:2.3:o:hima:f30_03x_yy_\(com\)_firmware:*:*:*:*:*:*:*:* Versions up to 24.14 Vulnerable ·HIMA
- cpe:2.3:h:hima:f30_03x_yy_\(com\):-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·HIMA
- cpe:2.3:o:hima:f30_03x_yy_\(cpu\)_firmware:*:*:*:*:*:*:*:* Versions up to 18.6 Vulnerable ·HIMA
- cpe:2.3:h:hima:f30_03x_\(cpu\)_yy:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·HIMA
- cpe:2.3:o:hima:f35_03x_yy_\(com\)_firmware:*:*:*:*:*:*:*:* Versions up to 24.14 Vulnerable ·HIMA
- cpe:2.3:h:hima:f35_03x_yy_\(com\)_:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·HIMA
- cpe:2.3:o:hima:f35_03x_yy_\(cpu\)_firmware:*:*:*:*:*:*:*:* Versions up to 18.6 Vulnerable ·HIMA
- cpe:2.3:h:hima:f35_03x_yy_\(cpu\):-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·HIMA
- cpe:2.3:o:hima:f60_cpu_03x_yy_\(com\)_firmware:*:*:*:*:*:*:*:* Versions up to 24.14 Vulnerable ·HIMA
- cpe:2.3:h:hima:f60_cpu_03x_yy_\(com\):-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·HIMA
Show 16 more CPE
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:hima:f60_cpu_03x_yy_\(cpu\)_firmware:*:*:*:*:*:*:*:* | up to 18.6 | Vulnerable | HIMA |
| cpe:2.3:h:hima:f60_cpu_03x_yy_\(cpu\):-:*:*:*:*:*:*:* | not specified by NVD | Running on | HIMA |
| cpe:2.3:o:hima:f-com_01_firmware:*:*:*:*:*:*:*:* | up to 14.12 | Vulnerable | HIMA |
| cpe:2.3:h:hima:f-com_01:-:*:*:*:*:*:*:* | not specified by NVD | Running on | HIMA |
| cpe:2.3:o:hima:f-cpu_01_firmware:*:*:*:*:*:*:*:* | up to 14.16 | Vulnerable | HIMA |
| cpe:2.3:h:hima:f-cpu_01:-:*:*:*:*:*:*:* | not specified by NVD | Running on | HIMA |
| cpe:2.3:o:hima:x-com_01_e_yy_firmware:*:*:*:*:*:*:*:* | up to 15.14 | Vulnerable | HIMA |
| cpe:2.3:h:hima:x-com_01_e_yy:-:*:*:*:*:*:*:* | not specified by NVD | Running on | HIMA |
| cpe:2.3:o:hima:x-com_01_yy_firmware:*:*:*:*:*:*:*:* | up to 14.12 | Vulnerable | HIMA |
| cpe:2.3:h:hima:x-com_01_yy:-:*:*:*:*:*:*:* | not specified by NVD | Running on | HIMA |
| cpe:2.3:o:hima:x-cpu_01_firmware:*:*:*:*:*:*:*:* | up to 14.16 | Vulnerable | HIMA |
| cpe:2.3:h:hima:x-cpu_01:-:*:*:*:*:*:*:* | not specified by NVD | Running on | HIMA |
| cpe:2.3:o:hima:x-cpu_31_firmware:*:*:*:*:*:*:*:* | up to 14.16 | Vulnerable | HIMA |
| cpe:2.3:h:hima:x-cpu_31:-:*:*:*:*:*:*:* | not specified by NVD | Running on | HIMA |
| cpe:2.3:o:hima:x-sb_01_firmware:*:*:*:*:*:*:*:* | up to 7.54 | Vulnerable | HIMA |
| cpe:2.3:h:hima:x-sb_01:-:*:*:*:*:*:*:* | not specified by NVD | Running on | HIMA |
- cpe:2.3:o:hima:f60_cpu_03x_yy_\(cpu\)_firmware:*:*:*:*:*:*:*:* Versions up to 18.6 Vulnerable ·HIMA
- cpe:2.3:h:hima:f60_cpu_03x_yy_\(cpu\):-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·HIMA
- cpe:2.3:o:hima:f-com_01_firmware:*:*:*:*:*:*:*:* Versions up to 14.12 Vulnerable ·HIMA
- cpe:2.3:h:hima:f-com_01:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·HIMA
- cpe:2.3:o:hima:f-cpu_01_firmware:*:*:*:*:*:*:*:* Versions up to 14.16 Vulnerable ·HIMA
- cpe:2.3:h:hima:f-cpu_01:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·HIMA
- cpe:2.3:o:hima:x-com_01_e_yy_firmware:*:*:*:*:*:*:*:* Versions up to 15.14 Vulnerable ·HIMA
- cpe:2.3:h:hima:x-com_01_e_yy:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·HIMA
- cpe:2.3:o:hima:x-com_01_yy_firmware:*:*:*:*:*:*:*:* Versions up to 14.12 Vulnerable ·HIMA
- cpe:2.3:h:hima:x-com_01_yy:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·HIMA
- cpe:2.3:o:hima:x-cpu_01_firmware:*:*:*:*:*:*:*:* Versions up to 14.16 Vulnerable ·HIMA
- cpe:2.3:h:hima:x-cpu_01:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·HIMA
- cpe:2.3:o:hima:x-cpu_31_firmware:*:*:*:*:*:*:*:* Versions up to 14.16 Vulnerable ·HIMA
- cpe:2.3:h:hima:x-cpu_31:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·HIMA
- cpe:2.3:o:hima:x-sb_01_firmware:*:*:*:*:*:*:*:* Versions up to 7.54 Vulnerable ·HIMA
- cpe:2.3:h:hima:x-sb_01:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·HIMA
Remediation
No fixed version listed by the sources yet.
Timeline
- 2026-10-02 Threatist record created from CVE-2024-24781
- 2026-10-03 Alias added: GHSA-pqrw-mpmw-gp6m
References
More HIMA F-com 01 Firmware vulnerabilities
- TI-2024-16299 HIMA: Origin Validation Error in multiple products CVSS 3.1MEDIUM 4.3
Sources
- CVE-2024-24781 · CVE Program
- CVE-2024-24781 · NVD
- FIRST EPSS
- GHSA-pqrw-mpmw-gp6m · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences