critical9.8
CVE-2024-6596
An unauthenticated remote attacker can run malicious c# code included in curve files and execute commands in the users context.
Impact
An unauthenticated remote attacker can run malicious c# code included in curve files and execute commands in the users context.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Endress | Echo Curve Viewer | before 6.0.0 |
| Endress | Fieldcare Sfe500 Package | before 1.40.1 |
| Endress | Field Xpert Smt79 Firmware | All versions |
| Endress | Field Xpert Smt77 Firmware | All versions |
| Endress | Field Xpert Smt70 Firmware | All versions |
| Endress | Field Xpert Smt50 Firmware | All versions |