PT-2024-16533 · Sick · Sick Inspectorp62X+2

Manuel Stotz

+2

·

Published

2024-12-06

·

Updated

2024-12-11

·

CVE-2024-10773

CVSS v3.1

9.0

Critical

VectorAV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions SICK InspectorP61x versions (affected versions not specified) SICK InspectorP62x versions (affected versions not specified) SICK TiM3xx versions (affected versions not specified)
Description The product is vulnerable to pass-the-hash attacks in combination with hardcoded credentials of hidden user levels. This means that an attacker can log in with the hidden user levels and gain full access to the device.
Recommendations For SICK InspectorP61x, consider disabling access to hidden user levels until a patch is available. For SICK InspectorP62x, restrict access to the device to minimize the risk of exploitation. For SICK TiM3xx, avoid using hardcoded credentials for hidden user levels until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Hidden Functionality

Weakness Enumeration

CWE-912

Related Identifiers

CVE-2024-10773

Affected Products

Sick Inspectorp61X
Sick Inspectorp62X
Sick Tim3Xx