CVE-2024-10771: SICK InspectorP61x, SICK InspectorP62x and SICK TiM3xx are vulnerable for remote code execution
Due to missing input validation during one step of the firmware update process, the product is vulnerable to remote code execution. With network access and the user level ”Service”, an attacker can execute arbitrary system commands in the root user’s contexts.
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is the severity of CVE-2024-10771?
CVE-2024-10771 is considered a high severity vulnerability due to its potential for remote code execution.
How do I fix CVE-2024-10771?
To remediate CVE-2024-10771, ensure that you apply the latest firmware updates provided by SICK.
Who is affected by CVE-2024-10771?
CVE-2024-10771 affects SICK products including the InspectorP61x, InspectorP62x, and TiM3xx series.
What actions can an attacker take with CVE-2024-10771?
An attacker with network access and Service level permissions can execute arbitrary system commands in the context of the root user.
Is there a workaround for CVE-2024-10771?
Currently, the recommended action for CVE-2024-10771 is to apply software updates, as there are no known effective workarounds.