CVE-2024-10774highCWE-306

CVE-2024-10774: falha de alta gravidade em SICK InspectorP61x

SICK InspectorP61x and SICK InspectorP62x have unauthenticated CROWN APIs

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar SICK InspectorP61x+ Monitorar SICK InspectorP62x

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

21Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 7.3epss 0.5%
Unauthenticated CROWN APIs allow access to critical functions. This leads to the accessibility of large parts of the web application without authentication.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
Produtos afetados
SICK AG · SICK InspectorP61xSICK AG · SICK InspectorP62x
CVEs relacionadas — SICK InspectorP61x

No mesmo produto, das mais perigosas para as menos.

CVE-2024-10771HIGHSICK InspectorP61x, SICK InspectorP62x and SICK TiM3xx are vulnerable for remote code executionEPSS 1.1%CVE-2024-10773CRITICALSICK InspectorP61x, SICK InspectorP62x and SICK TiM3xx are vulnerable for pass-the-hash attacksEPSS 0.6%CVE-2024-10776HIGHSICK InspectorP61x and SICK InspectorP62x: missing authenticationEPSS 0.5%CVE-2024-11022MEDIUMSICK InspectorP61x and SICK InspectorP62x are vulnerable for a replay attackEPSS 0.4%CVE-2024-10772HIGHSICK InspectorP61x and SICK InspectorP62x are vulnerable for firmware modificationEPSS 0.3%