CVE-2024-23765

An issue was discovered on HMS Anybus X-Gateway AB7832-F 3 devices. The gateway exposes an unidentified service on port 7412 on the network. All the network services of the gateway become unresponsive after sending 85 requests to this port. The content and length of the frame does not matter. The device needs to be restarted to resume operations.

• https://sensepost.com/blog/2024/targeting-an-industrial-protocol-gateway/
• https://sensepost.com/blog/2024/targeting-an-industrial-protocol-gateway/

Published

Jun 26, 2024

Last Modified

Jun 17, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-2376The WPQA Builder WordPress plugin before 6.1.1 does not have…8.8
• CVE-2024-23760Cleartext Storage of Sensitive Information in Gambio 4.9.2.0…2.7
• CVE-2024-23761Server Side Template Injection in Gambio 4.9.2.0 allows atta…9.8
• CVE-2024-23762Unrestricted File Upload vulnerability in Content Manager fe…7.8
• CVE-2024-23763SQL Injection vulnerability in Gambio through 4.9.2.0 allows…9.8
• CVE-2024-23764Certain WithSecure products allow Local Privilege Escalation…6.7
• CVE-2024-23766An issue was discovered on HMS Anybus X-Gateway AB7832-F 3 d…7.5
• CVE-2024-23767An issue was discovered on HMS Anybus X-Gateway AB7832-F fir…8.8
• CVE-2024-23768Dremio before 24.3.1 allows path traversal. An authenticated…8.8
• CVE-2024-23769Improper privilege control for the named pipe in Samsung Mag…5.5
• CVE-2024-2377A vulnerability exists in the too permissive HTTP response h…7.6
• CVE-2024-23770darkhttpd through 1.15 allows local users to discover creden…5.5