CVE-2024-10773CWE-912

SICK InspectorP61x, SICK InspectorP62x and SICK TiM3xx are vulnerable for pass-the-hash attacks

Critical · published December 6, 2024

CVSS v3.1
9.0
EPSS
1%
Percentile
47.6
In the wild
Unconfirmed
What it is

🚨 A hidden treasure map just got leaked, and the treasure is full device access! With a single pass-the-hash attack, an attacker can exploit hardcoded credentials for hidden user levels. 🔥 Think of it like finding a master key in a hotel that opens every room, including the VIP suites — suddenly, even the most restricted areas are up for grabs! 🏨 This vulnerability could allow an attacker to waltz into your system as if they owned it, gaining complete control. They could access sensitive data, manipulate settings, or even shut down critical services—an absolute nightmare for any organization! 💥

Put simply

Think of it like finding a master key in a hotel that opens every room, including the VIP suites — suddenly, even the most restricted areas are up for grabs! 🏨 CVE-2024-10773 exposes the system to pass-the-hash attacks, where attackers use hashed passwords combined with hardcoded credentials for hidden user levels to bypass authentication altogether, gaining unrestricted access to the device.

What to do

This vulnerability could allow an attacker to waltz into your system as if they owned it, gaining complete control. They could access sensitive data, manipulate settings, or even shut down critical services—an absolute nightmare for any organization! 💥 To safeguard your systems, update to the latest patched version immediately to eliminate this risk. Additionally, audit user permissions and eliminate any hardcoded credentials to bolster your defenses. 🔒 You can fix this! Stay proactive and secure your environment, and you'll be a security hero in no time! 🦸‍♂️

The record
Technical detail
CVSS v3.1
9.0 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00592 · 47.6th percentile
Weakness
CWE-912 · Hidden Functionality
Published
2024-12-06T12:31Z
EPSS history
Timeline
  • 06 DEC 12:31Z
    SICK InspectorP61x, SICK InspectorP62x and SICK TiM3xx are vulnerable for pass-the-hash attacks
    cvelistv5