cve/2024/CVE-2024-10773.md

21 lines
1009 B
Markdown
Raw Normal View History

2025-09-29 16:08:36 +00:00
### [CVE-2024-10773](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-10773)
![](https://img.shields.io/static/v1?label=Product&message=SICK%20InspectorP61x&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=SICK%20InspectorP62x&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=TiM3xx&color=blue)
![](https://img.shields.io/static/v1?label=Version&message=0%3C%20%3C5.0.0%20&color=brighgreen)
![](https://img.shields.io/static/v1?label=Version&message=0%3C%20%3C5.10.0%20&color=brighgreen)
![](https://img.shields.io/static/v1?label=Vulnerability&message=CWE-912%20Hidden%20Functionality&color=brighgreen)
### Description
The product is vulnerable to pass-the-hash attacks in combination with hardcoded credentials of hidden user levels. This means that an attacker can log in with the hidden user levels and gainfull access to the device.
### POC
#### Reference
- https://www.first.org/cvss/calculator/3.1
#### Github
No PoCs found on GitHub currently.