GCVE - cpe:2.3:o:sick:msc800_firmware:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:o:sick:msc800_firmware:*:*:*:*:*:*:*:*

part: o version: * update: *

Vendor	Sick (`7f3a0778-9cb3-5791-a25c-ef23979e3fe0`)
Product	Msc800 Firmware (`358bd87e-d09b-53b9-8884-12ab69897291`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2024-8751`	vulnerable	2026-06-08 07:00:25.641766	CVE-2024-8751 HIGH (7.5) A vulnerability allows a remote unauthenticated attacker to modify the prod uct’s IP address over the Sopas ET interface. This can lead to a Denial of Service attack. Published: 2024-09-12T21:38:37.516Z Updated: 2026-07-24T12:01:28.194Z Open on db.gcve.eu Reference links https://sick.com/psirt https://cdn.sick.com/media/docs/1/11/411/Special_information_CYBERSECURITY_BY_SICK_en_IM0084411.PDF https://www.cisa.gov/resources-tools/resources/ics-recommended-practices https://www.first.org/cvss/calculator/3.1 https://www.sick.com/.well-known/csaf/white/2024/sca-2024-0002.pdf	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-27577`	vulnerable	2026-06-08 05:41:56.729801	Details available The vulnerability in the MSC800 in all versions before 4.15 allows for an attacker to predict the TCP initial sequence number. When the TCP sequence is predictable, an attacker can send packets that are forged to appear to come from a trusted computer. These forged packets could compromise services on the MSC800. SICK has released a new firmware version of the SICK MSC800 and recommends updating to the newest version. Published: 2022-04-11T19:37:47.000Z Updated: 2024-08-03T05:32:59.251Z Open on db.gcve.eu Reference links https://sick.com/psirt	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2020-2075`	vulnerable	2026-06-08 05:24:58.821534	Details available Platform mechanism AutoIP allows remote attackers to reboot the device via a crafted packet in SICK AG solutions Bulkscan LMS111, Bulkscan LMS511, CLV62x – CLV65x, ICR890-3, LMS10x, LMS11x, LMS15x, LMS12x, LMS13x, LMS14x, LMS5xx, LMS53x, MSC800, RFH. Published: 2020-08-31T17:09:07.000Z Updated: 2024-08-04T06:54:00.593Z Open on db.gcve.eu Reference links https://www.sick.com/de/en/service-and-support/the-sick-product-security-incident-response-team-sick-psirt/w/psirt/#advisories	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2019-10979`	vulnerable	2026-06-08 05:12:26.122696	Details available SICK MSC800 all versions prior to Version 4.0, the affected firmware versions contain a hard-coded customer account password. Published: 2019-07-01T20:05:10.000Z Updated: 2024-08-04T22:40:15.569Z Open on db.gcve.eu Reference links http://www.securityfocus.com/bid/108924 https://www.us-cert.gov/ics/advisories/icsa-19-178-04 https://www.sick.com/de/en/service-and-support/the-sick-product-security-incident-response-team-sick-psirt/w/psirt/#advisories	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.