TI-2024-09988 CVE-2024-10776 · GHSA-6w93-crhf-283q
SICK InspectorP61x and SICK InspectorP62x: missing authentication
Priority MEDIUM 42
Lua apps can be deployed, removed, started, reloaded or stopped without authorization via AppManager.
Vulnerabilities
6 records
Advisory: SICK InspectorP61x, SICK InspectorP62x — sick.com/.well-known/csaf/white/2024/sca-2024-0006.pdf Clear all filters
TI-2024-09986 CVE-2024-10774 · GHSA-q44m-hgj6-jq7m
SICK InspectorP61x and SICK InspectorP62x have unauthenticated CROWN APIs
Priority LOW 38
Unauthenticated CROWN APIs allow access to critical functions.
TI-2024-09985 CVE-2024-10773 · GHSA-x46h-g6vh-9qm7
SICK InspectorP61x, SICK InspectorP62x and SICK TiM3xx are vulnerable for pass-the-hash attacks
Priority MEDIUM 42
The product is vulnerable to pass-the-hash attacks in combination with hardcoded credentials of hidden user levels.
TI-2024-09984 CVE-2024-10772 · GHSA-x758-w7gj-hvxf
SICK InspectorP61x and SICK InspectorP62x are vulnerable for firmware modification
Priority MEDIUM 40
Since the firmware update is not validated, an attacker can install modified firmware on the device.
TI-2024-09983 CVE-2024-10771 · GHSA-252q-qph8-r7q3
SICK InspectorP61x, SICK InspectorP62x and SICK TiM3xx are vulnerable for remote code execution
Priority MEDIUM 42
Due to missing input validation during one step of the firmware update process, the product is vulnerable to remote code execution.
TI-2024-10212 CVE-2024-11022 · GHSA-5fmx-vhp4-m6xv
SICK InspectorP61x and SICK InspectorP62x are vulnerable for a replay attack
Priority LOW 25
The authentication process to the web server uses a challenge response procedure which inludes the nonce and additional information.