Unauthorized Access to Lua Apps Through AppManager

CVE-2024-10776

Summary

A vulnerability has been identified in SICK's AppManager, allowing unauthorized interactions with Lua applications. This issue permits unauthorized users to deploy, remove, start, reload, or stop applications without appropriate permissions. As a result, an attacker could potentially disrupt legitimate applications, leading to a denial of service (DoS) condition. Furthermore, this vulnerability enables the attacker to read and write files or to load malicious applications that exploit the full range of features available to legitimate users. Proper security measures must be taken to mitigate this risk.

References