CVE-2024-11022

Medium

Description

The authentication process to the web server uses a challenge response procedure which inludes the nonce and additional information. This challenge can be used several times for login and is therefore vulnerable for a replay attack.

SeverityMedium

CVSS5.6

Exploit probability36. percentile0.4%

ProductSICK InspectorP61x

PublishedDec 6, 2024

First seenDec 6, 2024

Weakness typeCWE-323CWE-323

How to fix

Vendor advisories

sick.com/.well-known/csaf/white/2024/sca-2024-0006.pdf
sick.com/.well-known/csaf/white/2024/sca-2024-0006.json

Affected products

Product	Affected versions	Fixed in
SICK AG SICK InspectorP61x	No range specified	—
SICK AG SICK InspectorP62x	No range specified	—

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.