CVE-2024-10776highCWE-306

CVE-2024-10776: falha de alta gravidade em SICK InspectorP61x

SICK InspectorP61x and SICK InspectorP62x: missing authentication

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar SICK InspectorP61x+ Monitorar SICK InspectorP62x

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

21Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 8.2epss 0.5%
Lua apps can be deployed, removed, started, reloaded or stopped without authorization via AppManager. This allows an attacker to remove legitimate apps creating a DoS attack, read and write files or load apps that use all features of the product available to a customer.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H
Produtos afetados
SICK AG · SICK InspectorP61xSICK AG · SICK InspectorP62x
CVEs relacionadas — SICK InspectorP61x

No mesmo produto, das mais perigosas para as menos.

CVE-2024-10771HIGHSICK InspectorP61x, SICK InspectorP62x and SICK TiM3xx are vulnerable for remote code executionEPSS 1.1%CVE-2024-10773CRITICALSICK InspectorP61x, SICK InspectorP62x and SICK TiM3xx are vulnerable for pass-the-hash attacksEPSS 0.6%CVE-2024-10774HIGHSICK InspectorP61x and SICK InspectorP62x have unauthenticated CROWN APIsEPSS 0.5%CVE-2024-11022MEDIUMSICK InspectorP61x and SICK InspectorP62x are vulnerable for a replay attackEPSS 0.4%CVE-2024-10772HIGHSICK InspectorP61x and SICK InspectorP62x are vulnerable for firmware modificationEPSS 0.3%