Msc800 Firmware vulnerabilities

2 known vulnerabilities in Msc800 Firmware from SICK. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  MSC800: Missing Authentication for Critical Functionality

  CVE-2024-8751Sep 12, 2024SICK

  A vulnerability allows a remote unauthenticated attacker to modify the prod uct’s IP address over the Sopas ET interface. This can lead to a Denial of Service attack.

• 9.1 Critical severity

  SICK MSC800: Use of Insufficiently Random Values

  CVE-2022-27577Apr 11, 2022SICK MSC800EPSS 1.44%

  The vulnerability in the MSC800 in all versions before 4.15 allows for an attacker to predict the TCP initial sequence number. When the TCP sequence is predictable, an attacker can send packets that are forged to appear to come from a trusted computer. These f