CVE-2024-10772

Summary

Since the firmware update is not validated, an attacker can install modified firmware on the device. This has a high impact on the availabilty, integrity and confidentiality up to the complete compromise of the device.

Affected Software

Weaknesses

• CWE-649: CWE-649 Reliance on Obfuscation or Encryption of Security-Relevant Inputs without Integrity Checking

ADP Enrichment

CISA ADP Vulnrichment

• SSVC:
• Exploitation: none
  • Automatable: no
  • Technical Impact: total

References

• https://sick.com/psirt
• https://cdn.sick.com/media/docs/1/11/411/Special_information_CYBERSECURITY_BY_SICK_en_IM0084411.PDF
• https://www.cisa.gov/resources-tools/resources/ics-recommended-practices
• https://www.first.org/cvss/calculator/3.1
• https://www.sick.com/.well-known/csaf/white/2024/sca-2024-0006.pdf
• https://www.sick.com/.well-known/csaf/white/2024/sca-2024-0006.json

• ←Previous
• Next→