CVE-2024-8751

Summary

A vulnerability allows a remote unauthenticated attacker to modify the prod uct’s IP address over the Sopas ET interface. This can lead to a Denial of Service attack.

Affected Software

VendorProductVersion RangeStatus
SICK AGMSC800V1.0 <= <=V4.25affected
SICK AGMSC800S1.0 <= <=S2.93.19affected
Endress+HauserMARSIC200all versionsaffected
Endress+HauserMARSIC280all versionsaffected
Endress+HauserMARSIC300all versionsaffected
Endress+HauserMCS100FTall versionsaffected
Endress+HauserMCS200HWall versionsaffected
Endress+HauserMCS300Pall versionsaffected
Endress+HauserMERCEM300Zall versionsaffected
Endress+HauserSAM800all versionsaffected
Endress+HauserSIPROCESSall versionsaffected
Endress+HauserGMS800all versionsaffected
Endress+HauserGMS800 FIDORall versionsaffected
Endress+HauserGM32all versionsaffected
Endress+HauserVICOTEC320all versionsaffected
Endress+HauserMCU ETH-Service and Modbus-TCP Moduleall versionsaffected
Endress+HauserFLPSall versionsaffected
Endress+HauserMES1B B&B Converterall versionsaffected

Weaknesses

  • CWE-306: CWE-306 Missing Authentication for Critical Function

Workarounds

For Endress+Hauser MARSIC200, MARSIC280, MARSIC300, MCS100FT, MCS200HW, MCS300P, MERCEM300Z, SAM800, SIPROCESS, GMS800, GMS800 FIDOR, GM32, VICOTEC320, MCU ETH-Service and Modbus-TCP Module, FLPS, MES1B B&B Converter:  Please make sure that only trusted entities have access to the device. Furthermore, you should apply the following General Security Measures when operating the product to mitigate the associated security risk. The ”ICS-CERT recommended practices on Industrial Security” could help to implement the general security practices.

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: yes
    • Technical Impact: partial

References