CVE-2024-6596

criticalpriority · track · 0EPSS 0.008 · 56 %ileDEEUUS

grimoire priorityP2 · Scheduled

Exploitable?

—

no known exploitation

Likely / severe?

0.79% (56th) EPSS

CVSS 9.8 · critical

Is it mine?

27 products

Check your exposure

Who says so?

3 sources

cnnvd · enisa_euvd · endress_hauser_psirt

EPSS · scored 2026-10-27

An unauthenticated remote attacker can run malicious c# code included in curve files and execute commands in the users context.

remediations

Vendor fix, mitigation, or workaround guidance, as published by each source.

A vendor fix is available.

Fixedendress_hauser_psirt
- For standalone Echo Curve Viewer installations, download and install Echo Curve Viewer version >=6.00.00 from the Endress+Hauser Software Portal - For bundled installations with FieldCare SFE500, download and install FieldCare SFE500 Package version >= 1.40.1 from the Endress+Hauser Software Portal external link - For Field Xpert Devices, the required update is installed automatically during startup. This requires a working internet connection and (under certain circumstances) a valid maintenance period and/or a connection to the E+H Netilion Cloud. Please refer to the Field Xpert documentation for details regarding the update mechanism.

cvss

Technical severity, 0–10. One row per scoring source.

9.8

010

base score 0–10 · higher = more severe · hover a vector to decode

v3.19.8criticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:Hsecondary · ENISA EU

v3.19.8criticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:Hsecondary · info@cert.vde.comexploitability 3.9 · impact 5.9

v3.19.8criticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:Hsecondary · Endress+Hauser PSIRT DE

v3.19criticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:Usecondary · CVSS-BT (t0sche)

ssvc

A stakeholder decision — act, attend, or track — from exploitation and impact.

Exploitation: none · Automatable: yes · Technical Impact: totalcoordinatorcisa_ssvcUS

weaknesses

The CWE weakness classes this flaw belongs to.

CWE-94USCWE-94US

affected products (27)

Products and version ranges known to be affected.

Vendor Echo Curve Viewer≤ 5.2.2.6endress_hauser_psirtDE
Vendor Echo Curve Viewer <=5.2.2.6≤ 5.2.2.6endress_hauser_psirtDE
Vendor Field Xpert SMT50≤ SMT50_Win10_LTSC_21H2_v1.07.00_RC02_03endress_hauser_psirtDE
Vendor Field Xpert SMT50 <=SMT50_Win10_LTSC_21H2_v1.07.00_RC02_03≤ SMT50_Win10_LTSC_21H2_v1.07.00_RC02_03endress_hauser_psirtDE
Vendor Field Xpert SMT70≤ SMT70_Win10_LTSC_21H2_v1.07.00_RC02_01endress_hauser_psirtDE
Vendor Field Xpert SMT70 <=SMT70_Win10_LTSC_21H2_v1.07.00_RC02_01≤ SMT70_Win10_LTSC_21H2_v1.07.00_RC02_01endress_hauser_psirtDE
Vendor Field Xpert SMT77≤ SMT77_Win10_SAC_22H2_v1.08.04_RC03_02endress_hauser_psirtDE
Vendor Field Xpert SMT77 <=SMT77_Win10_SAC_22H2_v1.08.04_RC03_02≤ SMT77_Win10_SAC_22H2_v1.08.04_RC03_02endress_hauser_psirtDE
Vendor Field Xpert SMT79≤ V1.08.02-1.8.8684.34292endress_hauser_psirtDE
Vendor Field Xpert SMT79 <=V1.08.02-1.8.8684.34292≤ V1.08.02-1.8.8684.34292endress_hauser_psirtDE
Vendor FieldCare SFE500 Package USB≤ V1.40.00.7448endress_hauser_psirtDE
Vendor FieldCare SFE500 Package USB <=V1.40.00.7448≤ V1.40.00.7448endress_hauser_psirtDE
Vendor FieldCare SFE500 Package Web-Package≤ V1.40.00.7448endress_hauser_psirtDE
Vendor FieldCare SFE500 Package Web-Package <=V1.40.00.7448≤ V1.40.00.7448endress_hauser_psirtDE
Endress+Hauser Echo Curve Viewer≤ 0 ≤5.2.2.6enisa_euvdEU
Endress+Hauser Field Xpert SMT50≤ 0 ≤SMT50_Win10_LTSC_21H2_v1.07.00_RC02_03enisa_euvdEU
Endress+Hauser Field Xpert SMT70≤ 0 ≤SMT70_Win10_LTSC_21H2_v1.07.00_RC02_01enisa_euvdEU
Endress+Hauser Field Xpert SMT77≤ 0 ≤SMT77_Win10_SAC_22H2_v1.08.04_RC03_02enisa_euvdEU
Endress+Hauser Field Xpert SMT79≤ 0 ≤V1.08.02-1.8.8684.34292enisa_euvdEU
Endress+Hauser FieldCare SFE500 Package USB≤ 0 ≤V1.40.00.7448enisa_euvdEU

showing 20 of 27

advisories (1)

Vendor and ecosystem advisories describing this.

VDE-2024-041Endress+Hauser: Multiple products are vulnerable to code injection2024-09-10csaf · endress_hauser_psirtDE
Echo Curve Viewer is an utility used for offline visualization of previously recorded envelope curve data. Envelope curve records are exported from other Endress+Hauser software products like FieldCare as .curves files. Echo Curve Viewer opens .curves files and displays their contents. The .curves files contain device- specific C# calculation scripts as .cs files, that are needed for the interpretation of certain curve record types. Echo Curve Viewer loads .curves files and executes the contained C# code.

also known as (3)

Other names and identifiers for this entity.

sources

Which sources assert this record, and when.

cnnvd enisa_euvd endress_hauser_psirt NVD CVE.org MITRE

published 2024-09-10modified 2026-06-17

references (4)

External citations — patches, advisories, analysis.

scry

Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.

Free scan