CVE-2024-10771highCWE-94

CVE-2024-10771: high-severity vulnerability in SICK InspectorP61x

SICK InspectorP61x, SICK InspectorP62x and SICK TiM3xx are vulnerable for remote code execution

Published · Updated

Follow this CVE+ Monitor TDC-X401GL+ Monitor SICK InspectorP61x

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

21Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 8.8epss 1.1%
Due to missing input validation during one step of the firmware update process, the product is vulnerable to remote code execution. With network access and the user level ”Service”, an attacker can execute arbitrary system commands in the root user’s contexts.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Affected products
SICK AG · SICK InspectorP61xSICK AG · SICK InspectorP62xSICK AG · TDC-X401GLSICK AG · TiM3xx
Related CVEs — SICK InspectorP61x

In the same product, most dangerous first.

CVE-2024-10773CRITICALSICK InspectorP61x, SICK InspectorP62x and SICK TiM3xx are vulnerable for pass-the-hash attacksEPSS 0.6%CVE-2026-22908CRITICALCVE-2026-22908EPSS 0.6%CVE-2026-22909HIGHCVE-2026-22909EPSS 0.6%CVE-2026-22917MEDIUMCVE-2026-22917EPSS 0.6%CVE-2026-22911MEDIUMCVE-2026-22911EPSS 0.5%CVE-2024-10776HIGHSICK InspectorP61x and SICK InspectorP62x: missing authenticationEPSS 0.5%