Description
A vulnerability allows a remote unauthenticated attacker to modify the prod uct’s IP address over the Sopas ET interface. This can lead to a Denial of Service attack.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
SICK AG MSC800
Default version status: affected
V1.0 to ≤ <=V4.25affectedS1.0 to ≤ <=S2.93.19affected
Endress+Hauser MARSIC200
Default version status: affected
all versionsaffected
Endress+Hauser MARSIC280
Default version status: affected
all versionsaffected
Endress+Hauser MARSIC300
Default version status: affected
all versionsaffected
Endress+Hauser MCS100FT
Default version status: affected
all versionsaffected
Endress+Hauser MCS200HW
Default version status: affected
all versionsaffected
Endress+Hauser MCS300P
Default version status: affected
all versionsaffected
Endress+Hauser MERCEM300Z
Default version status: affected
all versionsaffected
Endress+Hauser SAM800
Default version status: affected
all versionsaffected
Endress+Hauser SIPROCESS
Default version status: affected
all versionsaffected
Endress+Hauser GMS800
Default version status: affected
all versionsaffected
Endress+Hauser GMS800 FIDOR
Default version status: affected
all versionsaffected
Endress+Hauser GM32
Default version status: affected
all versionsaffected
Endress+Hauser VICOTEC320
Default version status: affected
all versionsaffected
Endress+Hauser MCU ETH-Service and Modbus-TCP Module
Default version status: affected
all versionsaffected
Endress+Hauser FLPS
Default version status: affected
all versionsaffected
Endress+Hauser MES1B B&B Converter
Default version status: affected
all versionsaffected
References
- https://sick.com/psirt ↗
- https://cdn.sick.com/media/docs/1/11/411/Special_information_CYBERSECURITY_BY_SICK_en_IM0084411.PDF ↗
- https://www.cisa.gov/resources-tools/resources/ics-recommended-practices ↗
- https://www.first.org/cvss/calculator/3.1 ↗
- https://www.sick.com/.well-known/csaf/white/2024/sca-2024-0002.pdf ↗
- https://www.sick.com/.well-known/csaf/white/2026/sca-2026-0009.pdf ↗
- https://www.sick.com/.well-known/csaf/white/2024/sca-2024-0002.json ↗
- https://www.sick.com/.well-known/csaf/white/2026/sca-2026-0009.json ↗
- https://www.endress.com ↗