PT-2024-39226 · Sopas Et+2 · Sopas Et+2

Published 2024-09-12 · Updated 2024-09-13 · CVE-2024-8751

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions: MSC800 versions prior to V4.26 MSC800 LFT versions prior to S2.93.20

Description: A vulnerability in the MSC800 allows an unauthenticated attacker to modify the product’s IP address over Sopas ET, which can lead to Denial of Service.

Recommendations: For MSC800 versions prior to V4.26, upgrade to version V4.26 to fix the issue. For MSC800 LFT versions prior to S2.93.20, upgrade to version S2.93.20 to fix the issue. As a temporary workaround, consider restricting access to Sopas ET to minimize the risk of exploitation.

Fix

Missing Authentication

Weakness Enumeration

CWE-306

Related Identifiers

CVE-2024-8751

Affected Products

Msc800

Msc800 Lft

Sopas Et

References · 9

• https://nvd.nist.gov/vuln/detail/CVE-2024-8751 · Security Note
• https://sick.com/.well-known/csaf/white/2024 · Vendor Advisory
• https://twitter.com/CVEnew/status/1834349238328983598 · Twitter Post
• https://first.org/cvss/calculator/3.1 · Note
• https://t.me/cvedetector/5530 · Telegram Post
• https://sick.com/psirt · Note
• https://cisa.gov/resources-tools/resources/ics-recommended-practices · Note
• https://twitter.com/VulmonFeeds/status/1834389975145537589 · Twitter Post
• https://cdn.sick.com/media/docs/1/11/411/Special_information_CYBERSECURITY_BY_SICK_en_IM0084411.PDF · Note