CVE-2024-10774 HIGH

CVE-2024-10774: SICK InspectorP61x and SICK InspectorP62x have unauthenticated CROWN APIs

Vendor Sick Ag
Product SICK InspectorP61x
Weakness CWE-306 · Missing auth
Published December 6, 2024
Last update December 9, 2024
View on NVD All CVEs

CVSS base score

7.3/10
Attack vector Network
Attack complexity Low
Privileges required None
User interaction None
Confidentiality Low
Integrity Low

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

What the vulnerability does

01Description

Unauthenticated CROWN APIs allow access to critical functions. This leads to the accessibility of large parts of the web application without authentication.

Key dates

02Disclosure timeline

December 6, 2024 CVE published
December 9, 2024 Record updated