cve/2024/CVE-2024-10772.md
2025-09-29 16:08:36 +00:00

19 lines
924 B
Markdown

### [CVE-2024-10772](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-10772)
![](https://img.shields.io/static/v1?label=Product&message=SICK%20InspectorP61x&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=SICK%20InspectorP62x&color=blue)
![](https://img.shields.io/static/v1?label=Version&message=0%3C%20%3C5.0.0%20&color=brighgreen)
![](https://img.shields.io/static/v1?label=Vulnerability&message=CWE-649%20Reliance%20on%20Obfuscation%20or%20Encryption%20of%20Security-Relevant%20Inputs%20without%20Integrity%20Checking&color=brighgreen)
### Description
Since the firmware update is not validated, an attacker can install modified firmware on thedevice. This has a high impact on the availabilty, integrity and confidentiality up to the complete compromise of the device.
### POC
#### Reference
- https://www.first.org/cvss/calculator/3.1
#### Github
No PoCs found on GitHub currently.