← Database
CVE-2024-6596
CRITICAL
CVSS: 9.8
Published: 2024-09-10
Modified: 2026-06-17
Description
An unauthenticated remote attacker can run malicious c# code included in curve files and execute commands in the users context.
Affected Platforms
Endress Fieldcare Sfe500 PackageEndress Field Xpert Smt70Endress Field Xpert Smt50Endress Field Xpert Smt77 FirmwareEndress Field Xpert Smt79 FirmwareEndress Field Xpert Smt50 FirmwareEndress Field Xpert Smt77Endress Field Xpert Smt79Endress Field Xpert Smt70 FirmwareEndress Echo Curve Viewer