CVE-2024-10776: Sick INSPECTOR61X Firmware

High severity, CVSS 8.2. EPSS: 0.5% chance of exploitation in the next 30 days.

Lua apps can be deployed, removed, started, reloaded or stopped without authorization via AppManager. This allows an attacker to remove legitimate apps creating a DoS attack, read and write files or load apps that use all features of the product available to a customer.

Affected products

• Sick INSPECTOR61X Firmware: before 5.0.0 (fixed in 5.0.0)
• Sick INSPECTOR62X Firmware: before 5.0.0 (fixed in 5.0.0)
• Sick AG Sick INSPECTORP61X: before 5.0.0 (fixed in 5.0.0)
• Sick AG Sick INSPECTORP62X: before 5.0.0 (fixed in 5.0.0)

Published 2024-12-06. Last modified 2026-06-17.