CVE-2024-10772highCWE-649

CVE-2024-10772: falha de alta gravidade em SICK InspectorP61x

SICK InspectorP61x and SICK InspectorP62x are vulnerable for firmware modification

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar SICK InspectorP61x+ Monitorar SICK InspectorP62x

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

21Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 8.8epss 0.3%
Since the firmware update is not validated, an attacker can install modified firmware on the device. This has a high impact on the availabilty, integrity and confidentiality up to the complete compromise of the device.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Produtos afetados
SICK AG · SICK InspectorP61xSICK AG · SICK InspectorP62x
CVEs relacionadas — SICK InspectorP61x

No mesmo produto, das mais perigosas para as menos.

CVE-2024-10771HIGHSICK InspectorP61x, SICK InspectorP62x and SICK TiM3xx are vulnerable for remote code executionEPSS 1.1%CVE-2024-10773CRITICALSICK InspectorP61x, SICK InspectorP62x and SICK TiM3xx are vulnerable for pass-the-hash attacksEPSS 0.6%CVE-2024-10776HIGHSICK InspectorP61x and SICK InspectorP62x: missing authenticationEPSS 0.5%CVE-2024-10774HIGHSICK InspectorP61x and SICK InspectorP62x have unauthenticated CROWN APIsEPSS 0.5%CVE-2024-11022MEDIUMSICK InspectorP61x and SICK InspectorP62x are vulnerable for a replay attackEPSS 0.4%