High severity · published Dec 6, 2024
CVE-2024-10771
SICK InspectorP61x, SICK InspectorP62x and SICK TiM3xx are vulnerable for remote code execution
8.8
CVSS
1.1%
EPSS
No
On KEV
Description
Due to missing input validation during one step of the firmware update process, the product
is vulnerable to remote code execution. With network access and the user level ”Service”, an attacker
can execute arbitrary system commands in the root user’s contexts.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Attack vector
Network
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)1.1% · higher than 66% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
SI
SICK InspectorP61x · SICK AG
before <5.0.0 · source: vendor
SI
SICK InspectorP62x · SICK AG
before <5.0.0 · source: vendor
TD
TDC-X401GL · SICK AG
all versions · source: vendor
TI
TiM3xx · SICK AG
before <5.10.0 · source: vendor, CISA
IF
Inspector61x Firmware · Sick
before 5.0.0 · source: CISA
IF
Inspector62x Firmware · Sick
before 5.0.0 · source: CISA
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2024-10771
CVE.org
https://www.cve.org/CVERecord?id=CVE-2024-10771
cdn.sick.com
https://cdn.sick.com/media/docs/1/11/411/Special_information_CYBERSECURITY_BY_SICK_en_IM0084411.PDF
sick.com
https://sick.com/psirt
www.cisa.gov
https://www.cisa.gov/resources-tools/resources/ics-recommended-practices
www.first.org
https://www.first.org/cvss/calculator/3.1
www.sick.com
https://www.sick.com/.well-known/csaf/white/2024/sca-2024-0006.json
www.sick.com
https://www.sick.com/.well-known/csaf/white/2024/sca-2024-0006.pdf
More from SICK InspectorP61x
9.0
CVE-2024-10773
SICK InspectorP61x, SICK InspectorP62x and SICK TiM3xx are vulnerable for pass-the-hash attacks
8.8
CVE-2024-10772
SICK InspectorP61x and SICK InspectorP62x are vulnerable for firmware modification
8.2
CVE-2024-10776
SICK InspectorP61x and SICK InspectorP62x: missing authentication
7.3
CVE-2024-10774
SICK InspectorP61x and SICK InspectorP62x have unauthenticated CROWN APIs
5.6
CVE-2024-11022
SICK InspectorP61x and SICK InspectorP62x are vulnerable for a replay attack