Skip to content
OpenAdvisories
High · 7.5 CVE-2024-8751 EUVD-2024-49395GHSA-m2jf-3295-7fpm

CVE-2024-8751

Published Sep 12, 2024 · Updated Jul 24, 2026 · Assigned by SICK AG

Vendor: Endress+Hauser Vendor: SICK Product: FLPS Product: GM32 Product: GMS800 Product: GMS800 FIDOR Product: MARSIC200 Product: MARSIC280 Product: MARSIC300 Product: MCS100FT Product: MCS200HW Product: MCS300P Product: MCU ETH-Service and Modbus-TCP Module Product: MERCEM300Z Product: MES1B B&B Converter Product: MSC800 Product: SAM800 Product: SIPROCESS Product: VICOTEC320

Description

A vulnerability allows a remote unauthenticated attacker to modify the prod
uct’s IP address over the Sopas ET interface. This can lead to a Denial of Service attack.

Affected products

VendorProductAffectedFixed
SICK MSC800 V1.0 – ≤ <=V4.25, S1.0 – ≤ <=S2.93.19 —
Endress+Hauser MARSIC200 all versions —
Endress+Hauser MARSIC280 all versions —
Endress+Hauser MARSIC300 all versions —
Endress+Hauser MCS100FT all versions —
Endress+Hauser MCS200HW all versions —
Endress+Hauser MCS300P all versions —
Endress+Hauser MERCEM300Z all versions —
Endress+Hauser SAM800 all versions —
Endress+Hauser SIPROCESS all versions —
Endress+Hauser GMS800 all versions —
Endress+Hauser GMS800 FIDOR all versions —
Endress+Hauser GM32 all versions —
Endress+Hauser VICOTEC320 all versions —
Endress+Hauser MCU ETH-Service and Modbus-TCP Module all versions —
Endress+Hauser FLPS all versions —
Endress+Hauser MES1B B&B Converter all versions —

Advisories 3

References