Description (CNA)
A vulnerability allows a remote unauthenticated attacker to modify the prod uct’s IP address over the Sopas ET interface. This can lead to a Denial of Service attack.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| SICK AG / MSC800 | affected V1.0 through <=V4.25; affected S1.0 through <=S2.93.19 |
| Endress+Hauser / MARSIC200 | affected all versions |
| Endress+Hauser / MARSIC280 | affected all versions |
| Endress+Hauser / MARSIC300 | affected all versions |
| Endress+Hauser / MCS100FT | affected all versions |
| Endress+Hauser / MCS200HW | affected all versions |
| Endress+Hauser / MCS300P | affected all versions |
| Endress+Hauser / MERCEM300Z | affected all versions |
| Endress+Hauser / SAM800 | affected all versions |
| Endress+Hauser / SIPROCESS | affected all versions |
| Endress+Hauser / GMS800 | affected all versions |
| Endress+Hauser / GMS800 FIDOR | affected all versions |
| Endress+Hauser / GM32 | affected all versions |
| Endress+Hauser / VICOTEC320 | affected all versions |
| Endress+Hauser / MCU ETH-Service and Modbus-TCP Module | affected all versions |
| Endress+Hauser / FLPS | affected all versions |
| Endress+Hauser / MES1B B&B Converter | affected all versions |
CWE
CWE-306
References
- https://sick.com/psirt
- https://cdn.sick.com/media/docs/1/11/411/Special_information_CYBERSECURITY_BY_SICK_en_IM0084411.PDF
- https://www.cisa.gov/resources-tools/resources/ics-recommended-practices
- https://www.first.org/cvss/calculator/3.1
- https://www.sick.com/.well-known/csaf/white/2024/sca-2024-0002.pdf
- https://www.sick.com/.well-known/csaf/white/2026/sca-2026-0009.pdf
- https://www.sick.com/.well-known/csaf/white/2024/sca-2024-0002.json
- https://www.sick.com/.well-known/csaf/white/2026/sca-2026-0009.json
- https://www.endress.com
ADP enrichment
No English description supplied.
No references supplied.