Unauthenticated Access Vulnerability in SICK CROWN APIs

CVE-2024-10774

What is CVE-2024-10774?

The CROWN APIs provided by SICK are affected by a significant vulnerability that permits unauthenticated access to critical functions within the web application. This defect enables unauthorized users to interact with sensitive areas of the system without proper authentication controls. As a result, this poses substantial risks to the integrity and confidentiality of the data handled by the affected product. Organizations utilizing SICK's CROWN APIs should take immediate actions to mitigate potential exploitation, such as applying patches and reviewing access controls to safeguard their web applications.

References