Medium severity · published Jun 12, 2024
CVE-2024-36454
Use of uninitialized resource issue exists in IPCOM EX2 Series (V01L0x Series) V01L07NF0201 and earlier, and IPCOM VE2 Series V01L07NF0201 and earlier
5.3
CVSS
0.5%
EPSS
No
On KEV
Description
Use of uninitialized resource issue exists in IPCOM EX2 Series (V01L0x Series) V01L07NF0201 and earlier, and IPCOM VE2 Series V01L07NF0201 and earlier. If this vulnerability is exploited, the system may be rebooted or suspended by receiving a specially crafted packet.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
None
Integrity
None
Availability
Low
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.5% · higher than 40% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
IE
IPCOM EX2 Series (V01L0x Series) · Fsas Technologies Inc.
V01L07NF0201 and earlier · source: vendor
IV
IPCOM VE2 Series · Fsas Technologies Inc.
V01L07NF0201 and earlier · source: vendor
IE
Ipcom Ex2 SC 3500 Firmware · Fujitsu
through 01l07nf0201 · source: CISA
IV
Ipcom Ve2 LS Plus2 220 Firmware · Fujitsu
through 01l07nf0201 · source: CISA
Affected product
IE
IPCOM EX2 Series (V01L0x Series)
Fsas Technologies Inc.