75 results · Feed
-
Critical max 9.2
SICK Products affected by Brotli Vulnerability (Broccoli2Shell)
SICK identified multiple products affected by the Brotli vulnerability, also known as Broccoli2Shell (CVE-2026-111497). Successful exploitation of this vulnerability could impact the confidentiality, integrity, and availability of affected systems. At the tim…
-
Critical max 10.0SCA-2026-0016 2 CVEs
Vulnerabilities Affecting SICK CorivaHub
SICK CorivaHub includes the third-party components Apache Tomcat and MapLibre GL, which are affected by two known vulnerabilities. These vulnerabilities include an improper input validation issue in Apache Tomcat and a vulnerability in MapLibre GL that could …
-
High max 7.5SCA-2026-0015 1 CVE
Vulnerability Affecting Sick_Safetyscanners_Base CPP Driver
An out-of-bounds read vulnerability exists in the open-source repository sick_safetyscanners_base (https://github.com/SICKAG/sick_safetyscanners_base), a standalone C++ driver library for SICK safety laser scanners. A specially crafted network packet could ca…
-
Critical max 9.3SCA-2026-0014 3 CVEs
Fast-xml-parser vulnerabilities affect Sentio Creator Extension 'Device Manager'
Multiple vulnerabilities in the third-party component fast-xml-parser affect the Device Manager Extension in Sentio Creator. The extension is maintained and updated independently from SICK Sentio Creator, but successful exploitation of these vulnerabilities c…
-
High max 8.6
Vulnerabilities in Wibu Systems CodeMeter Runtime Affect Multiple SICK Products
Several vulnerabilities in the Wibu Systems CodeMeter Runtime affect the SICK products Sentio Creator, Sentio Compose, Safety Designer, Stream Editor, CODE-LOC, LiDAR-LOC, PLB, SIM1200-2A1A130 LiDAR-LOC and multiple SICK Industrial PCs (APU0G00, APU0G50, APU0…
first Sep 4, 2026 -
High max 8.6SCA-2026-0013 3 CVEs
Vulnerabilities Affecting SICK CorivaEngine
SICK CorivaEngine includes the third-party components Netty and Spring Cloud Gateway that are affected by multiple known vulnerabilities. Under certain conditions, these vulnerabilities could allow remote attackers to perform HTTP request smuggling, cause res…
-
High max 8.3SCA-2026-0012 1 CVE
Vulnerability Affecting Sentio Creator Extension 'Device Manager'
The Device Manager extension shipped with Sentio Creator is affected by CVE-2026-80469. Affected versions are pre-installed in Sentio Creator releases up to and including version 2026.2. As the Device Manager extension can be updated independently of Sentio C…
-
Critical max 9.4
AppEngine vulnerability affects SICK ICR890-4 and SICK InspectorP6xx devices
Multiple internal virtual filesystem paths are unintentionally accessible remotely in the SICK ICR890-4 and SICK InspectorP6xx devices. If exploited, this vulnerability could potentially allow an unauthenticated attacker to compromise the availability, integr…
-
High max 7.5SCA-2026-0009 1 CVE
Vulnerability in several Endress+Hauser products
A vulnerability was discovered in several Endress+Hauser products that can be accessed via ethernet.
-
High max 8.7SCA-2026-0008 1 CVE
Vulnerability Affecting SICK Sentio Creator Extension “Software Deployment Manager”
The pre-installed Software Deployment Manager extension in SICK Sentio Creator is affected by CVE-2026-33151. The Software Deployment Manager extension is maintained and updated independently from SICK Sentio Creator and therefore SICK recommends applying the…
-
High max 7.5
Multiple vulnerabilities in SICK Enterprise Analytics and SICK Logistic Analytics Products
SICK has found multiple vulnerabilities in SICK Enterprise Analytics and the SICK Logistic Analytics products. The vulnerabilities could potentially affect the confidentiality, integrity and availability of the products. Therefore it is strongly recommended t…
first Oct 2, 2025 -
Critical max 9.3
Sudo vulnerability affects Endress+Hauser MCS200HW
The display unit of the Endress+Hauser MCS200HW is affected by a sudo chroot vulnerability.
-
Critical max 8.8
FreeRTOS Vulnerabilities have no impact on SICK Products
FreeRTOS has several known vulnerabilities and is used in various SICK products. A current analysis confirms that the identified vulnerabilities in FreeRTOS do not affect the mentioned SICK products. At this time, there is no indication of any potential risks…
first Feb 28, 2025 -
Critical max 9.8SCA-2026-0006 2 CVEs
Vulnerabilities affecting SICK Lector85x and SICK Lector83x
Two vulnerabilities affecting the SICK Lector85x and SICK Lector83x product families have been identified. Both vulnerabilities are caused by insufficient access restrictions in HTTP-based interfaces, which may allow unauthenticated access to sensitive device…
-
Medium max 6.5SCA-2026-0005 2 CVEs
Vulnerabilities affecting SICK LMS1000 and SICK MRS1000
Two vulnerabilities affect the SICK LMS1000 and SICK MRS1000 product families. The vulnerabilities allow the use of weak cryptographic configurations in the SSH service, which may enable an attacker with network access to observe, manipulate, or compromise th…
-
Critical max 10.0SCA-2026-0004 2 CVEs
Eclipse Cyclone DDS Vulnerabilities have no impact on SICK picoScan150 & SICK picoScan120 products
Eclipse Cyclone DDS has known vulnerabilities and is used in SICK picoScan150 and SICK picoScan120 products starting with version 2.2.0. A current analysis confirms that the identified vulnerabilities (CVE-2025-67109 and CVE-2023-24011) do not affect SICK pic…
-
Medium max 6.9SCA-2026-0003 1 CVE
Vulnerability affecting SICK nanoScan3 and microScan3
SICK has identified a 3rd party vulnerability (CVE-2025-55093) in the nanoScan3 and microScan3. Only specific variants within the microScan3 and nanoScan3 families are affected by CVE-2025-55093. The underlying issue in the NetX Duo networking module could, u…
-
High max 8.3
Vulnerabilities affecting SICK Incoming Goods Suite
SICK has identified multiple vulnerabilities in the SICK Incoming Goods Suite product. Vulnerabilities related to Grafana apply exclusively to the administrative user interface for log management and do not affect the Incoming Goods Suite user interface. The …
first Jan 15, 2026 -
Critical max 9.9
Vulnerabilities affecting SICK TDC-X401GL
SICK has identified multiple vulnerabilities in the SICK TDC-X401GL product. The vulnerabilities could potentially affect the confidentiality, integrity an availability of the product. Therefore it is strongly recommended to apply general security practices w…
-
Critical max 7.6
Vulnerabilities affecting SICK TLOC100-100
SICK has identified multiple vulnerabilities in the SICK TLOC100-100 product. The vulnerabilities could potentially affect the confidentiality, integrity an availability of the product. Therefore it is strongly recommended to apply general security practices …
first Oct 27, 2025 -
High max 8.2SCA-2025-0014 1 CVE
CodeMeter vulnerablity affects SICK CODE-LOC and SICK LIDAR-LOC
A vulnerability in the CodeMeter runtime affects the SICK products SICK CODE-LOC and SICK LIDAR-LOC. This could potentially affect the integrity, confidentiality and availability of the products. Only systems running on Microsoft Windows are affected. Further…
-
Critical max 9.3
Sudo vulnerability affects SICK SID products
SICK SID products are affected by the sudo vulnerability CVE-2025-32463. SICK strongly recommends to update to the latest version to mitigate the risk.
-
Critical max 9.8
Vulnerabilities affecting Endress+Hauser SSG-E210GC
Several vulnerabilities in the Endress+Hauser SSG-E210GC product were discoverd. The advisory includes a total of 23 vulnerabilities, of which 14 are confirmed as affected and 9 as known not affected.
-
Critical max 9.8
Vulnerabilities affecting SICK TDC-E210GC
SICK has identified multiple vulnerabilities in the SICK TDC-E210GC product. The advisory includes a total of 23 vulnerabilities, of which 14 are confirmed as affected and 9 as known not affected. At this time, SICK is not aware of any public exploits specifi…
-
High max 8.6SCA-2025-0008 19 CVEs
Multiple vulnerabilities in Endress+Hauser MEAC300-FNADE4
Several vulnerabilities in the Endress+Hauser MEAC300-FNADE4 were discovered, that can be accessed via Ethernet.
-
High max 8.8
Multiple vulnerabilities in SICK Field Analytics and SICK Media Server
SICK has found multiple vulnerabilities in the products SICK Field Analytics and SICK Media Server. The vulnerabilities could potentially affect the confidentiality, integrity an availability of the products. Therefore it is strongly recommended to apply gene…
-
Critical max 7.5
Vulnerability affecting picoScan and multiScan
SICK has identified a Denial of Service vulnerability (CVE-2025-32472) in picoScan and multiScan, which can cause the web page to become unresponsive. Due to their architectural design, these products are not affected by the other vulnerabilities listed in th…
-
High max 7.5
Vulnerabilities in SICK Flexi Compact
SICK has found two vulnerabilities that affect the SICK Flexi Compact. The vulnerabilities may affect the availability and confidentiality of the products. SICK is currently not aware of any public exploits.
-
Critical max 9.8
Critical vulnerabilities in SICK DL100-2xxxxxxx
Critical vulnerabilities have been found in the SICK device DL100-2xxxxxxx. If exploited, this potentially allows an attacker to impact availabiltiy, integrity and confidentaility of the products. Currently, SICK is not aware of any public exploits specifical…
-
Critical max 9.9
Multiple vulnerabilities in SICK MEAC300
SICK has identified vulnerabilities in MEAC300. These vulnerabilities, related to the OpenSSL library and specific device functionalities, could potentially allow remote, unauthenticated attackers to: 1) Cause a denial of service: Triggering an infinite loop …
first Feb 14, 2025 -
High max 8.8
Vulnerability in SICK Lector8xx and SICK InspectorP8xx
SICK has found two vulnerabilities that affect the SICK Lector8xx and SICK InspectorP8xx. The vulnerabilities may allow a remote low priviledged attacker to run arbitrary shell commands by manipulating the firmware file or executing low-level functions. SICK …
-
High
Vulnerability in SICK OLM
SICK received a report about a vulnerability in the SICK Support Portal supportportal.sick.com, which was hosted and operated by a third-party service provider. Due to a misconfiguration, the access restriction of a NFS (Network File System) storage system ha…
-
Critical max 9.0
Critical vulnerabilities in SICK InspectorP61x, InspectorP62x and TiM3xx
Multiple critical vulnerabilities were found in the SICK products InspectorP61x, InspectorP62x and TiM3xx. If exploited, this potentially allows an attacker to impact availabiltiy, integrity and confidentaility of the products. It is strongly recommended to u…
-
High max 8.8
Vulnerability in SICK Incoming Goods Suite
SICK found a vulnerability in the Incoming Goods Suite which allows privilege escalation to the administrative level. Currently SICK is not aware of any public exploits specifically targeting the vulnerability. SICK has released a new version and strongly rec…
-
Critical max 7.7
Third party vulnerabilities in SICK CDE-100
The SICK CDE-100 uses the open-source libraries FreeRTOS, lwIP and MCU Boot. The used libraries contain vulnerabilities that affect the SICK CDE-100.
-
Critical max 9.1
Critical vulnerability in multiple SICK products
A critical vulnerability has been discovered in the .sdd files of several SICK products. This vulnerability could allow a remote, unauthenticated attacker to gain access to the "Authorized Client" user role, potentially impacting the availability and integrit…
-
High max 7.5
Vulnerability in SICK MSC800
SICK found a security vulnerability in the SICK MSC800. This vulnerability allows an unauthenticated attacker to modify the IP address of the product through the SopasET interface, potentially leading to Denial of Service. Currently SICK is not aware of any p…
-
Critical max 10.0
Vulnerability in SICK Logistics Analytics Products and SICK Field Analytics
A critical vulnerability in Apache ActiveMQ affects the SICK products Field Analytics 1.2 and Logistics Analytics products 4.5. The Java OpenWire protocol marshaller that is used in ActiveMQ Classic and ActiveMQ Artemis is vulnerable to Remote Code execution.…
-
High max 8.8
Vulnerability in multiple SICK Flexi Soft Gateways
The SICK PSIRT received a report about a vulnerability in several Flexi Soft Gateways that could allow an attacker to login to the gateways by sending specially crafted packets and potentially impact the availabilty, integrity and confidentiality of the devic…
-
High max 8.2