Privilege Escalation Vulnerability in Incoming Goods Suite Allows Attacker to Gain Administrative Control

CVE-2024-11075

Summary

A vulnerability exists in the Incoming Goods Suite developed by SICK, which allows unprivileged users with access to the underlying system, whether local or via SSH, to escalate their privileges to an administrative level. This issue arises from the use of Docker images that operate with root permissions, creating a security misconfiguration. By exploiting this vulnerability, attackers can gain full administrative control over the system, posing significant risks to the integrity and security of the affected installations.

References