Skip to content
OpenAdvisories
Medium SCA-2026-0003 1 CVE

Vulnerability affecting SICK nanoScan3 and microScan3

Published Jan 26, 2026 · Updated Jan 26, 2026

Vendor: SICK Product: microScan3 EtherCAT Product: microScan3 EtherCAT Firmware Product: microScan3 Pro I/O Product: microScan3 Pro I/O Firmware Product: nanoScan3 Core I/O Product: nanoScan3 Core I/O Firmware Product: nanoScan3 Pro I/O Product: nanoScan3 Pro I/O Firmware

Summary

SICK has identified a 3rd party vulnerability (CVE-2025-55093) in the nanoScan3 and microScan3. Only specific variants within the microScan3 and nanoScan3 families are affected by CVE-2025-55093. The underlying issue in the NetX Duo networking module could, under specific conditions, cause the device to enter a safe error state that requires a restart. SICK recommends applying the mitigation for CVE-2025-55093.

Vulnerabilities 1

  • Medium 6.9
    CVE-2025-55093

    Out of bound read and write in _nx_ipv4_packet_receive() when handling unicast DHCP messages

    In NetX Duo before 6.4.4, the networking support module for Eclipse Foundation ThreadX, there was a potential out of bound read issue in _nx_ipv4_packet_receive() when handling unicast DHCP messages that could cause corruption of 4 bytes of memory.

    Eclipse Foundation NetX Duo

Revision history

  1. #1

    Initial version

References