Back to Database
Status published
High
CVE-2024-8751
CVE-2024-8751
Vulnerability Description
A vulnerability allows a remote unauthenticated attacker to modify the prod uct’s IP address over the Sopas ET interface. This can lead to a Denial of Service attack.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2024-8751
Credits & Attribution
No credits recorded in the NVD database.
References
- https://sick.com/psirt
- https://cdn.sick.com/media/docs/1/11/411/Special_information_CYBERSECURITY_BY_SICK_en_IM0084411.PDF
- https://www.cisa.gov/resources-tools/resources/ics-recommended-practices
- https://www.first.org/cvss/calculator/3.1
- https://www.sick.com/.well-known/csaf/white/2024/sca-2024-0002.pdf
- https://www.sick.com/.well-known/csaf/white/2026/sca-2026-0009.pdf
- https://www.sick.com/.well-known/csaf/white/2024/sca-2024-0002.json
- https://www.sick.com/.well-known/csaf/white/2026/sca-2026-0009.json
- https://www.endress.com
More from Endress+Hauser
View All →Affected Vendor
Endress+Hauser
View all reports →Affected Software
MSC800, MARSIC200, MARSIC280, MARSIC300, MCS100FT, MCS200HW, MCS300P, MERCEM300Z, SAM800, SIPROCESS, GMS800, GMS800 FIDOR, GM32, VICOTEC320, MCU ETH-Service and Modbus-TCP Module, FLPS, MES1B B&B Converter
Vulnerable Versions:
V1.0, S1.0, all versions
Timeline
Official Publish:
September 12th, 2024
Last Modified:
July 16th, 2026
Added to House:
July 22nd, 2026
CVSS Vectors
V3:
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H