CVE-2024-23766

An issue was discovered on HMS Anybus X-Gateway AB7832-F 3 devices. The gateway exposes a web interface on port 80. An unauthenticated GET request to a specific URL triggers the reboot of the Anybus gateway (or at least most of its modules). An attacker can use this feature to carry out a denial of service attack by continuously sending GET requests to that URL.

• CWE-598

• https://sensepost.com/blog/2024/targeting-an-industrial-protocol-gateway/
• https://sensepost.com/blog/2024/targeting-an-industrial-protocol-gateway/

Published

Jun 26, 2024

Last Modified

Jun 17, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-23760Cleartext Storage of Sensitive Information in Gambio 4.9.2.0…2.7
• CVE-2024-23761Server Side Template Injection in Gambio 4.9.2.0 allows atta…9.8
• CVE-2024-23762Unrestricted File Upload vulnerability in Content Manager fe…7.8
• CVE-2024-23763SQL Injection vulnerability in Gambio through 4.9.2.0 allows…9.8
• CVE-2024-23764Certain WithSecure products allow Local Privilege Escalation…6.7
• CVE-2024-23765An issue was discovered on HMS Anybus X-Gateway AB7832-F 3 d…4
• CVE-2024-23767An issue was discovered on HMS Anybus X-Gateway AB7832-F fir…8.8
• CVE-2024-23768Dremio before 24.3.1 allows path traversal. An authenticated…8.8
• CVE-2024-23769Improper privilege control for the named pipe in Samsung Mag…5.5
• CVE-2024-2377A vulnerability exists in the too permissive HTTP response h…7.6
• CVE-2024-23770darkhttpd through 1.15 allows local users to discover creden…5.5
• CVE-2024-23771darkhttpd before 1.15 uses strcmp (which is not constant tim…9.8