Skip to content
CVE PROGRAM SOURCE RECORD8.8 High

CVE-2024-11075

SICK Incoming Goods Suite privilege escalation vulnerability

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
SICK AG

Description

A vulnerability in the Incoming Goods Suite allows a user with unprivileged access to the underlying system (e.g. local or via SSH) a privilege escalation to the administrative level due to the usage of component vendor Docker images running with root permissions. Exploiting this misconfiguration leads to the fact that an attacker can gain administrative control. over the whole system.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

SICK AG SICK Incoming Goods Suite

Default version status: unaffected

  • 1.0.0affected

References