7.5
CVE-2024-8751
- EPSS 0.93%
- Veröffentlicht 12.09.2024 22:15:02
- Zuletzt bearbeitet 24.07.2026 13:16:55
- CVE-Watchlists
- Unerledigt
CVE-2024-8751
A vulnerability allows a remote unauthenticated attacker to modify the prod uct’s IP address over the Sopas ET interface. This can lead to a Denial of Service attack.
Daten sind bereitgestellt durch das CVE Programm von Authorized Data Publishers (ADP) (Unstrukturiert)
Herstellersick
≫
Produkt
msc800_firmware
Default Statusunknown
Version <=
4.25
Version
1.0
Status
affected
Version <=
s2.93.19
Version
1.0
Status
affected
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. 
Login
Login| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.93% | 0.565 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| psirt@sick.de | 7.5 | 3.9 | 3.6 |
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
|
CWE-306 Missing Authentication for Critical Function
The product does not perform any authentication for functionality that requires a provable user identity or consumes a significant amount of resources.
https://sick.com/psirt
https://www.cisa.gov/resources-tools/resources/ics-recommended-practices
https://www.first.org/cvss/calculator/3.1
https://www.endress.com
https://cdn.sick.com/media/docs/1/11/411/Special_information_CYBERSECURITY_BY_SICK_en_IM0084411.PDF
https://www.sick.com/.well-known/csaf/white/2024/sca-2024-0002.json
https://www.sick.com/.well-known/csaf/white/2024/sca-2024-0002.pdf
https://www.sick.com/.well-known/csaf/white/2026/sca-2026-0009.json
https://www.sick.com/.well-known/csaf/white/2026/sca-2026-0009.pdf