{"id":"CVE-2024-8751","aliases":["EUVD-2024-49395","GHSA-m2jf-3295-7fpm"],"status":"published","title":"CVE-2024-8751","description":"A vulnerability allows a remote unauthenticated attacker to modify the prod\nuct’s IP address over the Sopas ET interface. This can lead to a Denial of Service attack.","severity":{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-10","score":0.00934,"percentile":0.61038,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-306"],"published":"2024-09-12T21:38:37Z","modified":"2026-07-24T13:16:55Z","products":[{"vendor":"endress+hauser","product":"flps"},{"vendor":"endress+hauser","product":"gm32"},{"vendor":"endress+hauser","product":"gms800"},{"vendor":"endress+hauser","product":"gms800 fidor"},{"vendor":"endress+hauser","product":"marsic200"},{"vendor":"endress+hauser","product":"marsic280"},{"vendor":"endress+hauser","product":"marsic300"},{"vendor":"endress+hauser","product":"mcs100ft"},{"vendor":"endress+hauser","product":"mcs200hw"},{"vendor":"endress+hauser","product":"mcs300p"},{"vendor":"endress+hauser","product":"mcu eth-service and modbus-tcp module"},{"vendor":"endress+hauser","product":"mercem300z"},{"vendor":"endress+hauser","product":"mes1b b\u0026b converter"},{"vendor":"endress+hauser","product":"sam800"},{"vendor":"endress+hauser","product":"siprocess"},{"vendor":"endress+hauser","product":"vicotec320"},{"vendor":"sick","product":"msc800"},{"vendor":"sick","product":"msc800_firmware"},{"vendor":"sick ag","product":"marsic300"},{"vendor":"sick ag","product":"msc800"}],"references":[{"url":"https://sick.com/psirt","tags":["x_SICK PSIRT Website"]},{"url":"https://cdn.sick.com/media/docs/1/11/411/Special_information_CYBERSECURITY_BY_SICK_en_IM0084411.PDF","tags":["x_SICK Operating Guidelines"]},{"url":"https://www.cisa.gov/resources-tools/resources/ics-recommended-practices","tags":["x_ICS-CERT recommended practices on Industrial Security"]},{"url":"https://www.first.org/cvss/calculator/3.1","tags":["x_CVSS v3.1 Calculator"]},{"url":"https://www.sick.com/.well-known/csaf/white/2024/sca-2024-0002.pdf","tags":["vendor-advisory"]},{"url":"https://www.sick.com/.well-known/csaf/white/2026/sca-2026-0009.pdf","tags":["vendor-advisory"]},{"url":"https://www.sick.com/.well-known/csaf/white/2024/sca-2024-0002.json","tags":["x_The canonical URL"]},{"url":"https://www.sick.com/.well-known/csaf/white/2026/sca-2026-0009.json","tags":["x_The canonical URL"]},{"url":"https://www.endress.com","tags":["x_Endress+Hauser"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-8751"},{"url":"https://www.sick.com/.well-known/csaf/white/2024"},{"url":"https://github.com/advisories/GHSA-m2jf-3295-7fpm"}],"sources":{"cve":[{"id":"CVE-2024-8751","title":"CVE-2024-8751","description":"A vulnerability allows a remote unauthenticated attacker to modify the prod\nuct’s IP address over the Sopas ET interface. This can lead to a Denial of Service attack.","status":"published","published":"2024-09-12T21:38:37.516Z","modified":"2026-07-24T12:01:28.194Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"cna"}],"cwes":["CWE-306"],"updated_at":"2026-11-02T14:34:09.216761Z"}],"euvd":[{"id":"EUVD-2024-49395","description":"A vulnerability allows a remote unauthenticated attacker to modify the prod\nuct’s IP address over the Sopas ET interface. This can lead to a Denial of Service attack.","status":"published","published":"2024-09-12T21:38:37Z","modified":"2026-07-24T12:01:28Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T18:19:41.195396Z"}],"ghsa":[{"id":"GHSA-m2jf-3295-7fpm","title":"A vulnerability in the MSC800 allows an unauthenticated attacker to modify the product’s IP...","description":"A vulnerability in the MSC800 allows an unauthenticated attacker to modify the product’s IP\naddress over Sopas ET. \nThis can lead to Denial of Service. \nUsers are recommended to upgrade both\nMSC800 and MSC800 LFT to version V4.26 and S2.93.20 respectively which fixes this issue.","status":"published","published":"2024-09-13T00:30:48Z","modified":"2024-09-13T00:30:55Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"cwes":["CWE-306"],"updated_at":"2026-11-02T14:58:15.26738Z"}],"nvd":[{"id":"CVE-2024-8751","description":"A vulnerability allows a remote unauthenticated attacker to modify the prod\nuct’s IP address over the Sopas ET interface. This can lead to a Denial of Service attack.","status":"published","published":"2024-09-12T22:15:02.68Z","modified":"2026-07-24T13:16:55.727Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"secondary"}],"cwes":["CWE-306"],"updated_at":"2026-11-02T14:10:26.717759Z"}]}}