What is CVE-2024-8751?

CVE-2024-8751 is a high-severity vulnerability in Sick Ag Msc800, classified under Missing Authentication for Critical Function. CVSS score: 7.5/10. Published 2024-09-12.

How severe is CVE-2024-8751?

High severity. CVSS v3 base score is 7.5 out of 10.

Auth bypass in Sick Ag Msc800

CVE-2024-8751

A vulnerability in the MSC800 allows an unauthenticated attacker to modify the product’s IP address over Sopas ET. This can lead to Denial of Service. Users are recommended to upgrade both MSC800 and MSC800 LFT to version V4.26 and S2.93…

Vulnerability class: Broken Authentication

EPSS: 0.007 (47.6th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.5 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H.

Affected products

Sick Ag Msc800 — versions V1.0, S1.0

Weakness classification (CWE)

CWE-306 — Missing Authentication for Critical Function

References

psirt@sick.de (x_SICK PSIRT Website)
psirt@sick.de (x_SICK Operating Guidelines)
psirt@sick.de (x_ICS-CERT recommended practices on Industrial Security)
psirt@sick.de (x_CVSS v3.1 Calculator)
psirt@sick.de (vendor-advisory)

Frequently asked questions

What is CVE-2024-8751?: CVE-2024-8751 is a high-severity vulnerability in Sick Ag Msc800, classified under Missing Authentication for Critical Function. CVSS score: 7.5/10. Published 2024-09-12.
How severe is CVE-2024-8751?: High severity. CVSS v3 base score is 7.5 out of 10.