CVE-2024-3765
Description
A vulnerability classified as critical was found in Xiongmai AHB7804R-MH-V2, AHB8004T-GL, AHB8008T-GL, AHB7004T-GS-V3, AHB7004T-MHV2, AHB8032F-LME and XM530_R80X30-PQ_8M. Affected by this vulnerability is an unknown functionality of the component Sofia Service. The manipulation with the input ff00000000000000000000000000f103250000007b202252657422203a203130302c202253657373696f6e494422203a202230783022207d0a leads to improper access controls. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-260605 was assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
How to fix
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Xiongmai AHB7804R-MH-V2 | 4.02.R11.24340142.10001.131900.00000, 4.02.R11.A8531149.10001.131900.00000, 4.02.R11.C6380171.11201.141900.00000, 4.03.R11.0000020X.11201.042300.0000005, 4.03.R11.4912720B.11201.142300.0000004, 4.03.R11.4912720D.11201.142300.0000004, 4.03.R11.4915714A.12201.142300.0000000, 5.00.R02.00030751.10010.348717.0000000 | — |
| Xiongmai AHB8004T-GL | 4.02.R11.24340142.10001.131900.00000, 4.02.R11.A8531149.10001.131900.00000, 4.02.R11.C6380171.11201.141900.00000, 4.03.R11.0000020X.11201.042300.0000005, 4.03.R11.4912720B.11201.142300.0000004, 4.03.R11.4912720D.11201.142300.0000004, 4.03.R11.4915714A.12201.142300.0000000, 5.00.R02.00030751.10010.348717.0000000 | — |
| Xiongmai AHB8008T-GL | 4.02.R11.24340142.10001.131900.00000, 4.02.R11.A8531149.10001.131900.00000, 4.02.R11.C6380171.11201.141900.00000, 4.03.R11.0000020X.11201.042300.0000005, 4.03.R11.4912720B.11201.142300.0000004, 4.03.R11.4912720D.11201.142300.0000004, 4.03.R11.4915714A.12201.142300.0000000, 5.00.R02.00030751.10010.348717.0000000 | — |
| Xiongmai AHB7004T-GS-V3 | 4.02.R11.24340142.10001.131900.00000, 4.02.R11.A8531149.10001.131900.00000, 4.02.R11.C6380171.11201.141900.00000, 4.03.R11.0000020X.11201.042300.0000005, 4.03.R11.4912720B.11201.142300.0000004, 4.03.R11.4912720D.11201.142300.0000004, 4.03.R11.4915714A.12201.142300.0000000, 5.00.R02.00030751.10010.348717.0000000 | — |
| Xiongmai AHB7004T-MHV2 | 4.02.R11.24340142.10001.131900.00000, 4.02.R11.A8531149.10001.131900.00000, 4.02.R11.C6380171.11201.141900.00000, 4.03.R11.0000020X.11201.042300.0000005, 4.03.R11.4912720B.11201.142300.0000004, 4.03.R11.4912720D.11201.142300.0000004, 4.03.R11.4915714A.12201.142300.0000000, 5.00.R02.00030751.10010.348717.0000000 | — |
| Xiongmai AHB8032F-LME | 4.02.R11.24340142.10001.131900.00000, 4.02.R11.A8531149.10001.131900.00000, 4.02.R11.C6380171.11201.141900.00000, 4.03.R11.0000020X.11201.042300.0000005, 4.03.R11.4912720B.11201.142300.0000004, 4.03.R11.4912720D.11201.142300.0000004, 4.03.R11.4915714A.12201.142300.0000000, 5.00.R02.00030751.10010.348717.0000000 | — |
| Xiongmai XM530_R80X30-PQ_8M | 4.02.R11.24340142.10001.131900.00000, 4.02.R11.A8531149.10001.131900.00000, 4.02.R11.C6380171.11201.141900.00000, 4.03.R11.0000020X.11201.042300.0000005, 4.03.R11.4912720B.11201.142300.0000004, 4.03.R11.4912720D.11201.142300.0000004, 4.03.R11.4915714A.12201.142300.0000000, 5.00.R02.00030751.10010.348717.0000000 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.