CVE-2024-6596

Endress+Hauser: Multiple products are vulnerable to code injection

Published Sep 10, 2024 CVSS 3.1 · 9.8 Critical EPSS < 1% KEV · Not listed

Description

An unauthenticated remote attacker can run malicious c# code included in curve files and execute commands in the users context.

Affected Products

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions

Endress+Hauser

Echo Curve Viewer

unaffected

Version	Status	Constraints
`0`	affected	≤ 5.2.2.6

Endress+Hauser

FieldCare SFE500 Package USB

unaffected

Version	Status	Constraints
`0`	affected	≤ V1.40.00.7448

Endress+Hauser

FieldCare SFE500 Package Web-Package

unaffected

Version	Status	Constraints
`0`	affected	≤ V1.40.00.7448

Endress+Hauser

Field Xpert SMT50

unaffected

Version	Status	Constraints
`0`	affected	≤ SMT50_Win10_LTSC_21H2_v1.07.00_RC02_03

Endress+Hauser

Field Xpert SMT70

unaffected

Version	Status	Constraints
`0`	affected	≤ SMT70_Win10_LTSC_21H2_v1.07.00_RC02_01

Endress+Hauser

Field Xpert SMT77

unaffected

Version	Status	Constraints
`0`	affected	≤ SMT77_Win10_SAC_22H2_v1.08.04_RC03_02

Endress+Hauser

Field Xpert SMT79

unaffected

Version	Status	Constraints
`0`	affected	≤ V1.08.02-1.8.8684.34292

Configuration 1 [-]

OR	cpe:2.3:a:endress:echo_curve_viewer::::::::
	cpe:2.3:a:endress:fieldcare_sfe500_package::::::::

Configuration 2 [-]

AND

cpe:2.3:o:endress:field_xpert_smt79_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:endress:field_xpert_smt79:-:*:*:*:*:*:*:*

Configuration 3 [-]

AND

cpe:2.3:o:endress:field_xpert_smt77_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:endress:field_xpert_smt77:-:*:*:*:*:*:*:*

Configuration 4 [-]

AND

cpe:2.3:o:endress:field_xpert_smt70_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:endress:field_xpert_smt70:-:*:*:*:*:*:*:*

Configuration 5 [-]

AND

cpe:2.3:o:endress:field_xpert_smt50_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:endress:field_xpert_smt50:-:*:*:*:*:*:*:*

No data.

No data available yet.

Remediation

No solution or workaround provided in the CVE record

Tracking

Advisories

Source	ID	Title
EUVD	EUVD-2024-47661	An unauthenticated remote attacker can run malicious c# code included in curve files and execute commands in the users context.

Metrics

No CVSS v4.0

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploit prediction score: < 1% (0.791% probability within 30 days)

Exploitation none

Automatable yes

Technical Impact total

References

Link	Providers
https://cert.vde.com/en/advisories/VDE-2024-041

History

Oct 1, 2024 12:45 PM First appearance in the feed. Affected versions updated. Affected vendors updated View changes

Type	Values Removed	Values Added
First Time appeared		Endress Endress echo Curve Viewer Endress field Xpert Smt50 Endress field Xpert Smt50 Firmware Endress field Xpert Smt70 Endress field Xpert Smt70 Firmware Endress field Xpert Smt77 Endress field Xpert Smt77 Firmware Endress field Xpert Smt79 Endress field Xpert Smt79 Firmware Endress fieldcare Sfe500 Package
CPEs		cpe:2.3:a:endress:echo_curve_viewer:::::::: cpe:2.3:a:endress:fieldcare_sfe500_package:::::::: cpe:2.3:h:endress:field_xpert_smt50:-:::::::* cpe:2.3:h:endress:field_xpert_smt70:-:::::::* cpe:2.3:h:endress:field_xpert_smt77:-:::::::* cpe:2.3:h:endress:field_xpert_smt79:-:::::::* cpe:2.3:o:endress:field_xpert_smt50_firmware:-:::::::* cpe:2.3:o:endress:field_xpert_smt70_firmware:-:::::::* cpe:2.3:o:endress:field_xpert_smt77_firmware:-:::::::* cpe:2.3:o:endress:field_xpert_smt79_firmware:-:::::::*
Vendors & Products		Endress Endress echo Curve Viewer Endress field Xpert Smt50 Endress field Xpert Smt50 Firmware Endress field Xpert Smt70 Endress field Xpert Smt70 Firmware Endress field Xpert Smt77 Endress field Xpert Smt77 Firmware Endress field Xpert Smt79 Endress field Xpert Smt79 Firmware Endress fieldcare Sfe500 Package

Sep 10, 2024 7:30 PM First appearance in the feed. Affected versions updated. Affected vendors updated. Scoring metrics updated View changes

Type	Values Removed	Values Added
First Time appeared		Endress\+hauser Endress\+hauser echo Curve Viewer Firmware Endress\+hauser field Xpert Smt50 Firmware Endress\+hauser field Xpert Smt70 Firmware Endress\+hauser field Xpert Smt77 Firmware Endress\+hauser field Xpert Smt79 Firmware Endress\+hauser fieldcare Sfe500 Package Usb Firmware Endress\+hauser fieldcare Sfe500 Package Web-package Firmware
CPEs		cpe:2.3:o:endress\+hauser:echo_curve_viewer_firmware:::::::: cpe:2.3:o:endress\+hauser:field_xpert_smt50_firmware:::::::: cpe:2.3:o:endress\+hauser:field_xpert_smt70_firmware:::::::: cpe:2.3:o:endress\+hauser:field_xpert_smt77_firmware:::::::: cpe:2.3:o:endress\+hauser:field_xpert_smt79_firmware:::::::: cpe:2.3:o:endress\+hauser:fieldcare_sfe500_package_usb_firmware:::::::: cpe:2.3:o:endress\+hauser:fieldcare_sfe500_package_web-package_firmware::::::::
Vendors & Products		Endress\+hauser Endress\+hauser echo Curve Viewer Firmware Endress\+hauser field Xpert Smt50 Firmware Endress\+hauser field Xpert Smt70 Firmware Endress\+hauser field Xpert Smt77 Firmware Endress\+hauser field Xpert Smt79 Firmware Endress\+hauser fieldcare Sfe500 Package Usb Firmware Endress\+hauser fieldcare Sfe500 Package Web-package Firmware
Metrics		ssvc `{'options': {'Automatable': 'yes', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}`

Sep 10, 2024 8:15 AM Description updated. Title updated. Weaknesses updated. Added references. Scoring metrics updated View changes

Type	Values Removed	Values Added
Description		An unauthenticated remote attacker can run malicious c# code included in curve files and execute commands in the users context.
Title		Endress+Hauser: Multiple products are vulnerable to code injection
Weaknesses		CWE-94
References		https://cert.vde.com/en/advisories/VDE-2024-041
Metrics		cvssV3_1 `{'score': 9.8, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H'}`

Subscriptions

Endress Echo Curve Viewer Field Xpert Smt50 Field Xpert Smt50 Firmware Field Xpert Smt70 Field Xpert Smt70 Firmware Field Xpert Smt77 Field Xpert Smt77 Firmware Field Xpert Smt79 Field Xpert Smt79 Firmware Fieldcare Sfe500 Package

Endress\+hauser Echo Curve Viewer Firmware Field Xpert Smt50 Firmware Field Xpert Smt70 Firmware Field Xpert Smt77 Firmware Field Xpert Smt79 Firmware Fieldcare Sfe500 Package Usb Firmware Fieldcare Sfe500 Package Web-package Firmware

Weaknesses