sick Vulnerability Advisory Catalog

Total 122 security vulnerabilities recorded for sick software and firmware.

← Back to All Vendors
Component: icr890-4_firmware

Improper Access Control in the SICK ICR890-4 could allow an unauthenticated remote attacker to affect the availability of the device by changing setti...

📅 2023-07-10
CVSS 7.5 Dossier →
Component: icr890-4_firmware

Cleartext Transmission of Sensitive Information in the SICK ICR890-4 could allow a remote attacker to gather sensitive information by intercepting net...

📅 2023-07-10
CVSS 7.5 Dossier →
Component: icr890-4_firmware

Improper Access Control in the SICK ICR890-4 could allow an unauthenticated remote attacker to gather information about the system and download data v...

📅 2023-07-10
CVSS 8.2 Dossier →
Component: icr890-4_firmware

Exposure of Sensitive Information to an Unauthorized Actor in the SICK ICR890-4 could allow an unauthenticated remote attacker to retrieve sensitive i...

📅 2023-07-10
CVSS 8.6 Dossier →
Component: icr890-4_firmware

Cleartext Storage on Disk in the SICK ICR890-4 could allow an unauthenticated attacker with local access to the device to disclose sensitive informati...

📅 2023-07-10
CVSS 5.3 Dossier →
Component: icr890-4_firmware

Observable Response Discrepancy in the SICK ICR890-4 could allow a remote attacker to identify valid usernames for the FTP server from the response gi...

📅 2023-07-10
CVSS 5.3 Dossier →
Component: icr890-4_firmware

Improper Restriction of Excessive Authentication Attempts in the SICK ICR890-4 could allow a remote attacker to brute-force user credentials....

📅 2023-07-10
CVSS 5.3 Dossier →
Component: icr890-4_firmware

Unauthenticated endpoints in the SICK ICR890-4 could allow an unauthenticated remote attacker to retrieve sensitive information about the device via H...

📅 2023-07-10
CVSS 7.5 Dossier →
CVE-2023-31411 CRITICAL
Component: sick_eventcam_app

A remote unprivileged attacker can modify and access configuration settings on the EventCam App due to the absence of API authentication. The lack of ...

📅 2023-06-19
CVSS 9.8 Dossier →
CVE-2023-31410 CRITICAL
Component: sick_eventcam_app

A remote unprivileged attacker can intercept the communication via e.g. Man-In-The-Middle, due to the absence of Transport Layer Security (TLS) in the...

📅 2023-06-19
CVSS 9.8 Dossier →
Component: ftmg-esd20axx_firmware

Uncontrolled Resource Consumption in SICK FTMg AIR FLOW SENSOR with Partnumbers 1100214, 1100215, 1100216, 1120114, 1120116, 1122524, 1122526 allows a...

📅 2023-05-15
CVSS 5.3 Dossier →
Component: ftmg-esd20axx_firmware

Cleartext Storage of Sensitive Information in SICK FTMg AIR FLOW SENSOR with Partnumbers 1100214, 1100215, 1100216, 1120114, 1120116, 1122524, 1122526...

📅 2023-05-15
CVSS 5.3 Dossier →
Component: ftmg-esd20axx_firmware

Use of Password Hash Instead of Password for Authentication in SICK FTMg AIR FLOW SENSOR with Partnumbers 1100214, 1100215, 1100216, 1120114, 1120116,...

📅 2023-05-15
CVSS 6.2 Dossier →
Component: ftmg-esd20axx_firmware

Observable Response Discrepancy in SICK FTMg AIR FLOW SENSOR with Partnumbers 1100214, 1100215, 1100216, 1120114, 1120116, 1122524, 1122526 allows a r...

📅 2023-05-15
CVSS 5.3 Dossier →
Component: ftmg-esd20axx_firmware

Inclusion of Sensitive Information in Source Code in SICK FTMg AIR FLOW SENSOR with Partnumbers 1100214, 1100215, 1100216, 1120114, 1120116, 1122524, ...

📅 2023-05-15
CVSS 5.3 Dossier →
Component: ftmg-esd20axx_firmware

Uncontrolled Resource Consumption in SICK FTMg AIR FLOW SENSOR with Partnumbers 1100214, 1100215, 1100216, 1120114, 1120116, 1122524, 1122526 allows a...

📅 2023-05-15
CVSS 7.5 Dossier →
Component: ftmg-esd20axx_firmware

Improper Access Control in SICK FTMg AIR FLOW SENSOR with Partnumbers 1100214, 1100215, 1100216, 1120114, 1120116, 1122524, 1122526 allows an unprivil...

📅 2023-05-15
CVSS 7.5 Dossier →
Component: ftmg-esd20axx_firmware

Improper Access Control in SICK FTMg AIR FLOW SENSOR with Partnumbers 1100214, 1100215, 1100216, 1120114, 1120116, 1122524, 1122526 allows an unprivil...

📅 2023-05-15
CVSS 7.5 Dossier →
Component: ue410-en4_firmware

Missing Authentication for Critical Function in SICK Flexi Classic and Flexi Soft Gateways with Partnumbers 1042193, 1042964, 1044078, 1044072, 104407...

📅 2023-05-12
CVSS 7.5 Dossier →
CVE-2023-23451 CRITICAL
Component: ue410-en3_firmware

The Flexi Classic and Flexi Soft Gateways SICK UE410-EN3 FLEXI ETHERNET GATEW. with serial number <=2311xxxx all Firmware versions, SICK UE410-EN1 FLE...

📅 2023-04-19
CVSS 9.8 Dossier →
CVE-2023-23453 CRITICAL
Component: fx0-gent00010_firmware

Missing Authentication for Critical Function in SICK FX0-GENT v3 Firmware Version V3.04 and V3.05 allows an unprivileged remote attacker to achieve ar...

📅 2023-02-20
CVSS 9.8 Dossier →
CVE-2023-23452 CRITICAL
Component: fx0-gpnt00000_firmware

Missing Authentication for Critical Function in SICK FX0-GPNT v3 Firmware Version V3.04 and V3.05 allows an unprivileged remote attacker to achieve ar...

📅 2023-02-20
CVSS 9.8 Dossier →
CVE-2022-47377 CRITICAL
Component: sim2000_firmware

Password recovery vulnerability in SICK SIM2000ST Partnumber 2086502 with firmware version <1.13.4 allows an unprivileged remote attacker to gain acce...

📅 2022-12-16
CVSS 9.8 Dossier →
Component: rfu650-10100_firmware

Use of a Broken or Risky Cryptographic Algorithm in SICK RFU65x firmware version < v2.21 allows a low-privileged remote attacker to decrypt the encryp...

📅 2022-12-13
CVSS 6.5 Dossier →
Page 4 of 6 (122 Total Records)