High severity8.2NVD Advisory· Published Dec 6, 2024· Updated Apr 15, 2026
CVE-2024-10776
CVE-2024-10776
Description
Lua apps can be deployed, removed, started, reloaded or stopped without authorization via AppManager. This allows an attacker to remove legitimate apps creating a DoS attack, read and write files or load apps that use all features of the product available to a customer.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Patches
Vulnerability mechanics
References
6- cdn.sick.com/media/docs/1/11/411/Special_information_CYBERSECURITY_BY_SICK_en_IM0084411.PDFnvd
- sick.com/psirtnvd
- www.cisa.gov/resources-tools/resources/ics-recommended-practicesnvd
- www.first.org/cvss/calculator/3.1nvd
- www.sick.com/.well-known/csaf/white/2024/sca-2024-0006.jsonnvd
- www.sick.com/.well-known/csaf/white/2024/sca-2024-0006.pdfnvd
News mentions
0No linked articles in our index yet.