CVE-2024-10773 | THREATINT

We use these services and cookies to improve your user experience. You may opt out if you wish, however, this may limit some features on this site.

Please see our statement on Data Privacy.

Crisp.chat (Helpdesk and Chat)

Ok

Description

The product is vulnerable to pass-the-hash attacks in combination with hardcoded credentials of hidden user levels. This means that an attacker can log in with the hidden user levels and gain full access to the device.

Reserved 2024-11-04 | Published 2024-12-06 | Updated 2024-12-09 | Assigner SICK AG

CRITICAL: 9.0CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H

Problem types

CWE-912 Hidden Functionality

Product status

Default status

unaffected

Any version before <5.0.0

affected

Default status

unaffected

Any version before <5.0.0

affected

Default status

unaffected

Any version before <5.10.0

affected

Credits

Manuel Stotz finder

Tobias Jaeger finder

References

cdn.sick.com/...ation_CYBERSECURITY_BY_SICK_en_IM0084411.PDF

www.cisa.gov/...es-tools/resources/ics-recommended-practices

www.first.org/cvss/calculator/3.1

www.sick.com/.well-known/csaf/white/2024/sca-2024-0006.pdf vendor-advisory

www.sick.com/.well-known/csaf/white/2024/sca-2024-0006.json vendor-advisory

cve.org (CVE-2024-10773)

nvd.nist.gov (CVE-2024-10773)

Download JSON

https://cve.threatint.com/CVE/CVE-2024-10773

Support options

Helpdesk Chat, Email, Knowledgebase

Subscribe to our newsletter to learn more about our work.