Device Vulnerable to Pass-the-Hash Attacks

CVE-2024-10773

Summary

The security issue arises from the presence of hardcoded credentials associated with hidden user levels within SICK Industrial Devices. This vulnerability allows attackers to execute pass-the-hash attacks, enabling unauthorized access to sensitive areas of the device. This unauthorized access poses significant risks, including potential control of industrial processes and compromise of critical data. Organizations using affected SICK products must prioritize the implementation of security best practices and consider remediation to mitigate the risks associated with such vulnerabilities.

References