← CVE Intelligence

CVE-2024-6596

Endress+Hauser: Multiple products are vulnerable to code injection PUBLISHED

Description (CNA)

An unauthenticated remote attacker can run malicious c# code included in curve files and execute commands in the users context.

Affected (CNA)

Vendor / productVersions
Endress+Hauser / Echo Curve Vieweraffected 0 through 5.2.2.6
Endress+Hauser / FieldCare SFE500 Package USBaffected 0 through V1.40.00.7448
Endress+Hauser / FieldCare SFE500 Package Web-Packageaffected 0 through V1.40.00.7448
Endress+Hauser / Field Xpert SMT50affected 0 through SMT50_Win10_LTSC_21H2_v1.07.00_RC02_03
Endress+Hauser / Field Xpert SMT70affected 0 through SMT70_Win10_LTSC_21H2_v1.07.00_RC02_01
Endress+Hauser / Field Xpert SMT77affected 0 through SMT77_Win10_SAC_22H2_v1.08.04_RC03_02
Endress+Hauser / Field Xpert SMT79affected 0 through V1.08.02-1.8.8684.34292

CWE

CWE-94

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.