cdn.sick.comx_SICK Operating Guidelines
https://cdn.sick.com/media/docs/1/11/411/Special_information_CYBERSECURITY_BY_SICK_en_IM0084411.PDF CVE-2024-8751
HIGH
CVE-2024-8751
Record summary
CVE-2024-8751 has a selected CVSS score of 7.5 (high).
Description
A vulnerability allows a remote unauthenticated attacker to modify the prod uct’s IP address over the Sopas ET interface. This can lead to a Denial of Service attack.
Description source: CVE List
Exploitation context
CISA SSVC decision
ExploitationNone
AutomatableYes
Technical impactPartial
CISA Coordinator · SSVC 2.0.3 · Evaluated Sep 13, 2024 · Source: CVE List
Affected products and versions
Showing 12 of 18| Product | Source | Version range | Status |
|---|---|---|---|
Default status: affected | CVE List | all versions | affected |
Default status: affected | CVE List | all versions | affected |
Default status: affected | CVE List | all versions | affected |
GMS800 FIDORBrowse Endress+Hauser / GMS800 FIDORDefault status: affected | CVE List | all versions | affected |
MARSIC200Browse Endress+Hauser / MARSIC200Default status: affected | CVE List | all versions | affected |
MARSIC280Browse Endress+Hauser / MARSIC280Default status: affected | CVE List | all versions | affected |
MARSIC300Browse Endress+Hauser / MARSIC300Default status: affected | CVE List | all versions | affected |
MCS100FTBrowse Endress+Hauser / MCS100FTDefault status: affected | CVE List | all versions | affected |
MCS200HWBrowse Endress+Hauser / MCS200HWDefault status: affected | CVE List | all versions | affected |
Default status: affected | CVE List | all versions | affected |
MCU ETH-Service and Modbus-TCP ModuleBrowse Endress+Hauser / MCU ETH-Service and Modbus-TCP ModuleDefault status: affected | CVE List | all versions | affected |
MERCEM300ZBrowse Endress+Hauser / MERCEM300ZDefault status: affected | CVE List | all versions | affected |
References
11nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2024-8751 sick.comx_SICK PSIRT Website
https://sick.com/psirt cisa.govx_ICS CERT recommended practices on Industrial Security
https://www.cisa.gov/resources-tools/resources/ics-recommended-practices endress.comx_Endress+Hauser
https://www.endress.com/ first.orgx_CVSS v3.1 Calculator
https://www.first.org/cvss/calculator/3.1 sick.com
https://www.sick.com/.well-known/csaf/white/2024 sick.comx_The canonical URL
https://www.sick.com/.well-known/csaf/white/2024/sca-2024-0002.json sick.comVendor advisory
https://www.sick.com/.well-known/csaf/white/2024/sca-2024-0002.pdf sick.comx_The canonical URL
https://www.sick.com/.well-known/csaf/white/2026/sca-2026-0009.json sick.comVendor advisory
https://www.sick.com/.well-known/csaf/white/2026/sca-2026-0009.pdf