Skip to content
OpenAdvisories
High VDE-2026-045 1 CVE

Endress+Hauser: Multiple products affected by SopasET interface vulnerability

Published Jul 16, 2026 · Updated Jul 16, 2026

Vendor: Endress+Hauser Product: FLPS Product: GM32 Product: GMS800 Product: GMS800 FIDOR Product: MARSIC200 Product: MARSIC280 Product: MARSIC300 Product: MCS100FT Product: MCS200HW Product: MCS300P Product: MCU ETH-Service and Modbus-TCP Module Product: MERCEM300Z Product: MES1B B&B Converter Product: SAM800 Product: SIPROCESS Product: VICOTEC320

Summary

A vulnerability was discovered in several Endress+Hauser products that can be accessed via ethernet.

Details

Impact
This vulnerability allows a remote unauthenticated attacker to modify the IP address of the
product through the SopasET interface, potentially leading to Denial of Service. There are currently no
known public exploits specifically targeting this vulnerability.

Mitigation
Restrict device access to trusted and authorized entities only. Apply the general security measures during product operation to mitigate the identified security risk.
Refer to the ICS‑CERT Recommended Practices for Industrial Security for additional guidance.

Remediation
No remediation available.

Vulnerabilities 1

  • High 7.5
    CVE-2024-8751

    CVE-2024-8751

    A vulnerability allows a remote unauthenticated attacker to modify the prod uct’s IP address over the Sopas ET interface. This can lead to a Denial of Service attack.

    SICK Endress+Hauser MSC800 GM32

Revision history

  1. #1.0.0

    Initial version

References