CVE-2024-23767

An issue was discovered on HMS Anybus X-Gateway AB7832-F firmware version 3. The HICP protocol allows unauthenticated changes to a device's network configurations...

CVE-2024-23765

An issue was discovered on HMS Anybus X-Gateway AB7832-F 3 devices. The gateway exposes an unidentified service on port 7412 on the network. All the network services of the gateway become unresponsive after sending 85 requests to this port. The content and length of the frame does not matter. The...

CVE-2024-23766

An issue was discovered on HMS Anybus X-Gateway AB7832-F 3 devices. The gateway exposes a web interface on port 80. An unauthenticated GET request to a specific URL triggers the reboot of the Anybus gateway or at least most of its modules. An attacker can use this feature to carry out a denial of...

CVE-2024-23766

An issue was discovered on HMS Anybus X-Gateway AB7832-F 3 devices. The gateway exposes a web interface on port 80. An unauthenticated GET request to a specific URL triggers the reboot of the Anybus gateway or at least most of its modules. An attacker can use this feature to carry out a denial of...

CVE-2024-23765

HMS Anybus X-Gateway AB7832-F (3 devices) exposes an unidentified service on port 7412. After 85 requests to this port, all gateway network services become unresponsive, requiring a restart to resume operations. PT Security notes a temporary workaround to restrict access to port 7412; there is no...

CVE-2024-23765

An issue was discovered on HMS Anybus X-Gateway AB7832-F 3 devices. The gateway exposes an unidentified service on port 7412 on the network. All the network services of the gateway become unresponsive after sending 85 requests to this port. The content and length of the frame does not matter. The...

CVE-2024-23766

CVE-2024-23766 affects HMS Anybus X-Gateway AB7832-F (3 devices) where an unauthenticated GET request to a specific URL on port 80 can reboot the gateway or many modules, enabling DoS via repeated requests. Documented impact is availability loss (CVSS 3.1: AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H; bas...

HMS Networks Anybus X-Gateway AB7832-F3 Security Vulnerability

HMS Networks Anybus X-Gateway AB7832-F3 is an industrial gateway from HMS Networks. A security vulnerability exists in the HMS Networks Anybus X-Gateway AB7832-F3 that stems from the HICP protocol that allows unauthenticated changes to the device's network configuration...

CVE-2024-23765

An issue was discovered on HMS Anybus X-Gateway AB7832-F 3 devices. The gateway exposes an unidentified service on port 7412 on the network. All the network services of the gateway become unresponsive after sending 85 requests to this port. The content and length of the frame does not matter. The...