Skip to content
OpenAdvisories
High SCA-2026-0009 1 CVE

Vulnerability in several Endress+Hauser products

Published Jul 16, 2026 · Updated Jul 16, 2026

Vendor: Endress+Hauser Product: FLPS Product: GM32 Product: GMS800 Product: GMS800 FIDOR Product: MARSIC200 Product: MARSIC280 Product: MARSIC300 Product: MCS100FT Product: MCS200HW Product: MCS300P Product: MCU ETH-Service and Modbus-TCP Module Product: MERCEM300Z Product: MES1B B&B Converter Product: SAM800 Product: SIPROCESS Product: VICOTEC320

Summary

A vulnerability was discovered in several Endress+Hauser products that can be accessed via ethernet.

Details

Impact
If exploited, this vulnerability allows a remote unauthenticated attacker to modify the IP address of the product through the SopasET interface, potentially leading to Denial of Service. There are currently no known public exploits specifically targeting this vulnerability.

Mitigation
As general security measures, it is recommended to minimize network exposure of the devices, restrict network access, and follow recommended security practices in order to operate the devices in a protected IT environment.

Remediation
Customers are strongly advised to apply the recommended mitigation for the affected vulnerabilities to reduce potential risk.

Vulnerabilities 1

  • High 7.5
    CVE-2024-8751

    CVE-2024-8751

    A vulnerability allows a remote unauthenticated attacker to modify the prod uct’s IP address over the Sopas ET interface. This can lead to a Denial of Service attack.

    SICK Endress+Hauser MSC800 GM32

Revision history

  1. #1.0.0

    Initial version

References