CVE-2024-8751
Summary
| CVE | CVE-2024-8751 |
|---|---|
| State | PUBLISHED |
| Assigner | SICK AG |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2024-09-12 22:15:02 UTC |
| Updated | 2026-07-16 11:16:36 UTC |
| Description | A vulnerability allows a remote unauthenticated attacker to modify the prod uct’s IP address over the Sopas ET interface. This can lead to a Denial of Service attack. |
Risk And Classification
Primary CVSS: v3.1 7.5 HIGH from [email protected]
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
EPSS: 0.009260000 probability, percentile 0.567260000 (date 2026-07-22)
Problem Types: CWE-306 | CWE-306 CWE-306 Missing Authentication for Critical Function
| Version | Source | Type | Score | Severity | Vector |
|---|---|---|---|---|---|
| 3.1 | [email protected] | Secondary | 7.5 | HIGH | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H |
| 3.1 | CNA | CVSS | 7.5 | HIGH | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H |
CVSS v3.1 Breakdown
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Vendor Declared Affected Products
| Source | Vendor | Product | Version | Platforms |
|---|---|---|---|---|
| CNA | Endress Hauser | MSC800 | affected V1.0 <=V4.25 custom | Not specified |
| CNA | Endress Hauser | MSC800 | affected S1.0 <=S2.93.19 custom | Not specified |
| CNA | Endress Hauser | MARSIC200 | affected all versions custom | Not specified |
| CNA | Endress Hauser | MARSIC280 | affected all versions custom | Not specified |
| CNA | Endress Hauser | MARSIC300 | affected all versions custom | Not specified |
| CNA | Endress Hauser | MCS100FT | affected all versions custom | Not specified |
| CNA | Endress Hauser | MCS200HW | affected all versions custom | Not specified |
| CNA | Endress Hauser | MCS300P | affected all versions custom | Not specified |
| CNA | Endress Hauser | MERCEM300Z | affected all versions custom | Not specified |
| CNA | Endress Hauser | SAM800 | affected all versions custom | Not specified |
| CNA | Endress Hauser | SIPROCESS | affected all versions custom | Not specified |
| CNA | Endress Hauser | GMS800 | affected all versions custom | Not specified |
| CNA | Endress Hauser | GMS800 FIDOR | affected all versions custom | Not specified |
| CNA | Endress Hauser | GM32 | affected all versions custom | Not specified |
| CNA | Endress Hauser | VICOTEC320 | affected all versions custom | Not specified |
| CNA | Endress Hauser | MCU ETH-Service And Modbus-TCP Module | affected all versions custom | Not specified |
| CNA | Endress Hauser | FLPS | affected all versions custom | Not specified |
| CNA | Endress Hauser | MES1B BB Converter | affected all versions custom | Not specified |
| ADP | Sick | Msc800 Firmware | affected 1.0 4.25 custom | Not specified |
| ADP | Sick | Msc800 Firmware | affected 1.0 s2.93.19 custom | Not specified |
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| www.sick.com/.well-known/csaf/white/2024/sca-2024-0002.json | [email protected] | www.sick.com | |
| www.sick.com/.well-known/csaf/white/2024/sca-2024-0002.pdf | [email protected] | www.sick.com | |
| www.first.org/cvss/calculator/3.1 | [email protected] | www.first.org | |
| www.endress.com | [email protected] | www.endress.com | |
| sick.com/psirt | [email protected] | sick.com | |
| www.cisa.gov/resources-tools/resources/ics-recommended-practices | [email protected] | www.cisa.gov | |
| www.sick.com/.well-known/csaf/white/2026/sca-2026-0009.json | [email protected] | www.sick.com | |
| cdn.sick.com/media/docs/1/11/411/Special_information_CYBERSECURITY_BY_SICK... | [email protected] | cdn.sick.com | |
| www.sick.com/.well-known/csaf/white/2026/sca-2026-0009.pdf | [email protected] | www.sick.com | |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
Additional Advisory Data
| Source | Time | Event |
|---|---|---|
| CNA | 2024-09-12T21:36:00.000Z | 1: Initial version |
| CNA | 2026-07-16T10:00:00.000Z | 2: Added more products |
Solutions
CNA: For Endress+Hauser MSC800FT: Customers who use the version <=V4.25 are strongly recommended to upgrade to the latest release V4.26
CNA: For Endress+Hauser MSC800FT: Customers who use the version <=S2.93.19 are strongly recommended to upgrade to the latest release S2.93.20.
Workarounds
CNA: For Endress+Hauser MARSIC200, MARSIC280, MARSIC300, MCS100FT, MCS200HW, MCS300P, MERCEM300Z, SAM800, SIPROCESS, GMS800, GMS800 FIDOR, GM32, VICOTEC320, MCU ETH-Service and Modbus-TCP Module, FLPS, MES1B B&B Converter: Please make sure that only trusted entities have access to the device. Furthermore, you should apply the following General Security Measures when operating the product to mitigate the associated security risk. The ”ICS-CERT recommended practices on Industrial Security” could help to implement the general security practices.