PT-2024-16532 · Device · Device

Manuel Stotz + 1 · Published 2024-12-06 · Updated 2024-12-11 · CVE-2024-10772

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Device (affected versions not specified)

Description The issue arises from unvalidated firmware updates, allowing an attacker to install modified firmware on the device. This has a significant impact on availability, integrity, and confidentiality, potentially leading to the complete compromise of the device.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-649

Related Identifiers

CVE-2024-10772

Affected Products

Device

References · 12

• https://nvd.nist.gov/vuln/detail/CVE-2024-10772 · Security Note
• https://sick.com/.well-known/csaf/white/2024/sca-2024-0006.json · Vendor Advisory
• https://sick.com/.well-known/csaf/white/2024/sca-2024-0006.pdf · Vendor Advisory
• https://twitter.com/CveFindCom/status/1865019015912976837 · Twitter Post
• https://first.org/cvss/calculator/3.1 · Note
• https://t.me/cvenotify/103298 · Telegram Post
• https://twitter.com/CVEnew/status/1865019103485821236 · Twitter Post
• https://twitter.com/cracbot/status/1866724700254245273 · Twitter Post
• https://sick.com/psirt · Note
• https://cisa.gov/resources-tools/resources/ics-recommended-practices · Note
• https://t.me/cvedetector/12209 · Telegram Post
• https://cdn.sick.com/media/docs/1/11/411/Special_information_CYBERSECURITY_BY_SICK_en_IM0084411.PDF · Note