VulnerabilityDeferred

CVE-2024-36454

If this vulnerability is exploited, the system may be rebooted or suspended by receiving a specially crafted packet.

MEDIUM 5.3EPSS 0.46%

Does this matter?

Lower severity and a low EPSS score (0.46%). Track it; it rarely justifies an emergency change on its own.

Description

Use of uninitialized resource issue exists in IPCOM EX2 Series (V01L0x Series) V01L07NF0201 and earlier, and IPCOM VE2 Series V01L07NF0201 and earlier. If this vulnerability is exploited, the system may be rebooted or suspended by receiving a specially crafted packet.

CVSS 3.1: 5.3 MEDIUMCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
EPSS: 0.46% probability · 39th percentile
CISA KEV: Not listed
Weakness: CWE-908
Source: vultures@jpcert.or.jp

References

https://jvn.jp/en/jp/JVN25594256/
https://www.fujitsu.com/jp/products/network/support/2024/ipcom-02/
https://jvn.jp/en/jp/JVN25594256/
https://www.fujitsu.com/jp/products/network/support/2024/ipcom-02/

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.