CVE-2024-3765: Xiongmai AHB7804R-MH-V2 Sofia Service access…

Record summary

CVE-2024-3765 has a selected CVSS score of 9.8 (critical).

Description

A vulnerability classified as critical was found in Xiongmai AHB7804R-MH-V2, AHB8004T-GL, AHB8008T-GL, AHB7004T-GS-V3, AHB7004T-MHV2, AHB8032F-LME and XM530_R80X30-PQ_8M. Affected by this vulnerability is an unknown functionality of the component Sofia Service. The manipulation with the input ff00000000000000000000000000f103250000007b202252657422203a203130302c202253657373696f6e494422203a202230783022207d0a leads to improper access controls. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-260605 was assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.

Description source: CVE List

Exploitation context

CISA SSVC decision

ExploitationPoC

AutomatableYes

Technical impactTotal

CISA Coordinator · SSVC 2.0.3 · Evaluated Apr 15, 2024 · Source: CVE List

Affected products and versions

Showing 12 of 14

Product	Source	Version range	Status
AHB7004T-GS-V3 Browse Xiongmai / AHB7004T-GS-V3	CVE List	4.02.R11.24340142.10001.131900.00000	affected
		4.02.R11.A8531149.10001.131900.00000	affected
		4.02.R11.C6380171.11201.141900.00000	affected
		4.03.R11.0000020X.11201.042300.0000005	affected
		4.03.R11.4912720B.11201.142300.0000004	affected
		4.03.R11.4912720D.11201.142300.0000004	affected
		4.03.R11.4915714A.12201.142300.0000000	affected
		5.00.R02.00030751.10010.348717.0000000	affected
AHB7004T-MHV2 Browse Xiongmai / AHB7004T-MHV2	CVE List	4.02.R11.24340142.10001.131900.00000	affected
		4.02.R11.A8531149.10001.131900.00000	affected
		4.02.R11.C6380171.11201.141900.00000	affected
		4.03.R11.0000020X.11201.042300.0000005	affected
		4.03.R11.4912720B.11201.142300.0000004	affected
		4.03.R11.4912720D.11201.142300.0000004	affected
		4.03.R11.4915714A.12201.142300.0000000	affected
		5.00.R02.00030751.10010.348717.0000000	affected
AHB7804R-MH-V2 Browse Xiongmai / AHB7804R-MH-V2	CVE List	4.02.R11.24340142.10001.131900.00000	affected
		4.02.R11.A8531149.10001.131900.00000	affected
		4.02.R11.C6380171.11201.141900.00000	affected
		4.03.R11.0000020X.11201.042300.0000005	affected
		4.03.R11.4912720B.11201.142300.0000004	affected
		4.03.R11.4912720D.11201.142300.0000004	affected
		4.03.R11.4915714A.12201.142300.0000000	affected
		5.00.R02.00030751.10010.348717.0000000	affected
AHB8004T-GL Browse Xiongmai / AHB8004T-GL	CVE List	4.02.R11.24340142.10001.131900.00000	affected
		4.02.R11.A8531149.10001.131900.00000	affected
		4.02.R11.C6380171.11201.141900.00000	affected
		4.03.R11.0000020X.11201.042300.0000005	affected
		4.03.R11.4912720B.11201.142300.0000004	affected
		4.03.R11.4912720D.11201.142300.0000004	affected
		4.03.R11.4915714A.12201.142300.0000000	affected
		5.00.R02.00030751.10010.348717.0000000	affected
AHB8008T-GL Browse Xiongmai / AHB8008T-GL	CVE List	4.02.R11.24340142.10001.131900.00000	affected
		4.02.R11.A8531149.10001.131900.00000	affected
		4.02.R11.C6380171.11201.141900.00000	affected
		4.03.R11.0000020X.11201.042300.0000005	affected
		4.03.R11.4912720B.11201.142300.0000004	affected
		4.03.R11.4912720D.11201.142300.0000004	affected
		4.03.R11.4915714A.12201.142300.0000000	affected
		5.00.R02.00030751.10010.348717.0000000	affected
AHB8032F-LME Browse Xiongmai / AHB8032F-LME	CVE List	4.02.R11.24340142.10001.131900.00000	affected
		4.02.R11.A8531149.10001.131900.00000	affected
		4.02.R11.C6380171.11201.141900.00000	affected
		4.03.R11.0000020X.11201.042300.0000005	affected
		4.03.R11.4912720B.11201.142300.0000004	affected
		4.03.R11.4912720D.11201.142300.0000004	affected
		4.03.R11.4915714A.12201.142300.0000000	affected
		5.00.R02.00030751.10010.348717.0000000	affected
XM530_R80X30-PQ_8M Browse Xiongmai / XM530_R80X30-PQ_8M	CVE List	4.02.R11.24340142.10001.131900.00000	affected
		4.02.R11.A8531149.10001.131900.00000	affected
		4.02.R11.C6380171.11201.141900.00000	affected
		4.03.R11.0000020X.11201.042300.0000005	affected
		4.03.R11.4912720B.11201.142300.0000004	affected
		4.03.R11.4912720D.11201.142300.0000004	affected
		4.03.R11.4915714A.12201.142300.0000000	affected
		5.00.R02.00030751.10010.348717.0000000	affected
ahb7004t-gs-v3_firmware Browse xiongmaitech / ahb7004t-gs-v3_firmware Default status: unknown	CVE List	4.03.r11.4915714a.12201.142300.0000000	affected
		4.02.r11.a8531149.10001.131900.00000	affected
		4.03.r11.4912720b.11201.142300.0000004	affected
		4.03.r11.4912720d.11201.142300.0000004	affected
		5.00.r02.00030751.10010.348717.0000000	affected
		4.02.r11.c6380171.11201.141900.00000	affected
		4.03.r11.0000020x.11201.042300.0000005	affected
		4.02.r11.24340142.10001.131900.00000	affected
ahb7004t-mhv2_firmware Browse xiongmaitech / ahb7004t-mhv2_firmware Default status: unknown	CVE List	4.03.r11.4915714a.12201.142300.0000000	affected
		4.02.r11.a8531149.10001.131900.00000	affected
		4.03.r11.4912720b.11201.142300.0000004	affected
		4.03.r11.4912720d.11201.142300.0000004	affected
		5.00.r02.00030751.10010.348717.0000000	affected
		4.02.r11.c6380171.11201.141900.00000	affected
		4.03.r11.0000020x.11201.042300.0000005	affected
		4.02.r11.24340142.10001.131900.00000	affected
ahb7804r-mh-v2_firmware Browse xiongmaitech / ahb7804r-mh-v2_firmware Default status: unknown	CVE List	4.02.r11.24340142.10001.131900.00000	affected
		4.02.r11.a8531149.10001.131900.00000	affected
		4.02.r11.c6380171.11201.141900.00000	affected
		4.03.r11.0000020x.11201.042300.0000005	affected
		4.03.r11.4912720b.11201.142300.0000004	affected
		4.03.r11.4912720d.11201.142300.0000004	affected
		4.03.r11.4915714a.12201.142300.0000000	affected
		5.00.r02.00030751.10010.348717.0000000	affected
ahb8004t-gl_firmware Browse xiongmaitech / ahb8004t-gl_firmware Default status: unknown	CVE List	4.02.r11.a8531149.10001.131900.00000	affected
		4.03.r11.4912720b.11201.142300.0000004	affected
		4.03.r11.4912720d.11201.142300.0000004	affected
		5.00.r02.00030751.10010.348717.0000000	affected
		4.02.r11.c6380171.11201.141900.00000	affected
		4.03.r11.0000020x.11201.042300.0000005	affected
		4.02.r11.24340142.10001.131900.00000	affected
		4.03.r11.4915714a.12201.142300.0000000	affected
ahb8008t-gl_firmware Browse xiongmaitech / ahb8008t-gl_firmware Default status: unknown	CVE List	4.03.r11.4915714a.12201.142300.0000000	affected
		4.02.r11.a8531149.10001.131900.00000	affected
		4.03.r11.4912720b.11201.142300.0000004	affected
		4.03.r11.4912720d.11201.142300.0000004	affected
		5.00.r02.00030751.10010.348717.0000000	affected
		4.02.r11.c6380171.11201.141900.00000	affected
		4.03.r11.0000020x.11201.042300.0000005	affected
		4.02.r11.24340142.10001.131900.00000	affected

References

github.comrelated

https://github.com/netsecfish/xiongmai_incorrect_access_control

github.comexploit

https://github.com/netsecfish/xiongmai_incorrect_access_control/blob/main/pocCheck3-en.py

nvd.nist.gov

https://nvd.nist.gov/vuln/detail/CVE-2024-3765

VDB-260605 | CTI Indicators (IOB, IOC, TTP, IOA)signaturepermissions required

https://vuldb.com/?ctiid.260605

VDB-260605 | Xiongmai AHB7804R-MH-V2 Sofia Service access controlvdb entryTechnical descriptionmitigation

https://vuldb.com/?id.260605

Submit #311903 | Xiongmai AHB7804R-MH-V2, AHB8008T-GL, AHB8004T-GL, XM530_R80X30-PQ_8M, AHB7004T-GS-V3, AHB8032F-LME, AHB7004T-MHV2 V4.03.R11.4915714A.12201.142300.0000000, V4.02.R11.A8531149.10001.131900.00000, V4.03.R11.4912720B.11201.142300.0000004, V4.03.R Incorrect AThird-party advisory

https://vuldb.com/?submit.311903

CVE-2024-3765

Record summary

Description

Exploitation context

CISA SSVC decision

Affected products and versions

AHB7004T-GS-V3

AHB7004T-MHV2

AHB7804R-MH-V2

AHB8004T-GL

AHB8008T-GL

AHB8032F-LME

XM530_R80X30-PQ_8M

ahb7004t-gs-v3_firmware

ahb7004t-mhv2_firmware

ahb7804r-mh-v2_firmware

ahb8004t-gl_firmware

ahb8008t-gl_firmware

References