Sick Ag Sick Inspectorp61x
6 CVEs affecting Sick Ag Sick Inspectorp61x. Latest disclosed: 2024-12-06. Critical: 1, High: 4.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2024-10773 | Critical | 9.0 | 2024-12-06 | The product is vulnerable to pass-the-hash attacks in combination with hardcoded credentials of hidden user levels. This means that an attacker can log in with… |
CVE-2024-10772 | High | 8.8 | 2024-12-06 | Since the firmware update is not validated, an attacker can install modified firmware on the device. This has a high impact on the availabilty, integrity and c… |
CVE-2024-10771 | High | 8.8 | 2024-12-06 | Due to missing input validation during one step of the firmware update process, the product is vulnerable to remote code execution. With network access and the… |
CVE-2024-10776 | High | 8.2 | 2024-12-06 | Lua apps can be deployed, removed, started, reloaded or stopped without authorization via AppManager. This allows an attacker to remove legitimate apps creatin… |
CVE-2024-10774 | High | 7.3 | 2024-12-06 | Unauthenticated CROWN APIs allow access to critical functions. This leads to the accessibility of large parts of the web application without authentication. |
CVE-2024-11022 | Medium | 5.6 | 2024-12-06 | The authentication process to the web server uses a challenge response procedure which inludes the nonce and additional information. This challenge can be used… |