CVE-2024-10773
CRITICALSICK InspectorP61x/62x <5.0.0 & TiM3xx <5.10.0 - Unauthenticated Pass-the-Hash via Hardcoded Credentials
Title source: llmDescription
The product is vulnerable to pass-the-hash attacks in combination with hardcoded credentials of hidden user levels. This means that an attacker can log in with the hidden user levels and gain full access to the device.
References (6)
Core 6
Core References
Various Sources x_sick psirt website
https://sick.com/psirt
Various Sources x_sick operating guidelines
https://cdn.sick.com/media/docs/1/11/411/Special_information_CYBERSECURITY_BY_SICK_en_IM0084411.PDF
Third Party Advisory, US Government Resource x_ics-cert recommended practices on industrial security
https://www.cisa.gov/resources-tools/resources/ics-recommended-practices
Various Sources x_cvss v3.1 calculator
https://www.first.org/cvss/calculator/3.1
Various Sources vendor-advisory
https://www.sick.com/.well-known/csaf/white/2024/sca-2024-0006.pdf
Various Sources vendor-advisory
x_csaf
https://www.sick.com/.well-known/csaf/white/2024/sca-2024-0006.json
Scores
CVSS v3
9.0
EPSS
0.0056
EPSS Percentile
42.2%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H
CISA SSVC
Vulnrichment
Exploitation
none
Automatable
no
Technical Impact
total
Details
CWE
CWE-912
Status
published
Products (3)
SICK AG/SICK InspectorP61x
< <5.0.0
SICK AG/SICK InspectorP62x
< <5.0.0
SICK AG/TiM3xx
< <5.10.0
Published
Dec 06, 2024
Tracked Since
Feb 18, 2026