ICSA-19-178-04

SICK MSC800

view advisory published 2019-06-27

Successful exploitation of this vulnerability could allow a low-skilled remote attacker to reconfigure settings and/or disrupt the functionality of the device.

describes (1)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2019-10979US	critical9.8OT elevated	3.38% (89th)	—	2019-07-01
SICK MSC800 all versions prior to Version 4.0, the affected firmware versions contain a hard-coded customer account password.

references

External citations — patches, advisories, analysis.

Recommended Practicesexternal
Recommended Practicesexternal
ICS Advisory ICSA-19-178-04 JSONself
ICS Advisory ICSA-19-178-04 Web Versionself
Recommended Practicesexternal

remediations (1)

MitigationMSC800
In case the referenced patches cannot be applied, the following general security practices could mitigate the associated risk.

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan