31 results · Clear filters · Feed
-
High max 7.5SCA-2026-0015 1 CVE
Vulnerability Affecting Sick_Safetyscanners_Base CPP Driver
An out-of-bounds read vulnerability exists in the open-source repository sick_safetyscanners_base (https://github.com/SICKAG/sick_safetyscanners_base), a standalone C++ driver library for SICK safety laser scanners. A specially crafted network packet could ca…
-
High max 8.6
Vulnerabilities in Wibu Systems CodeMeter Runtime Affect Multiple SICK Products
Several vulnerabilities in the Wibu Systems CodeMeter Runtime affect the SICK products Sentio Creator, Sentio Compose, Safety Designer, Stream Editor, CODE-LOC, LiDAR-LOC, PLB, SIM1200-2A1A130 LiDAR-LOC and multiple SICK Industrial PCs (APU0G00, APU0G50, APU0…
first Sep 4, 2026 -
High max 8.6SCA-2026-0013 3 CVEs
Vulnerabilities Affecting SICK CorivaEngine
SICK CorivaEngine includes the third-party components Netty and Spring Cloud Gateway that are affected by multiple known vulnerabilities. Under certain conditions, these vulnerabilities could allow remote attackers to perform HTTP request smuggling, cause res…
-
High max 8.3SCA-2026-0012 1 CVE
Vulnerability Affecting Sentio Creator Extension 'Device Manager'
The Device Manager extension shipped with Sentio Creator is affected by CVE-2026-80469. Affected versions are pre-installed in Sentio Creator releases up to and including version 2026.2. As the Device Manager extension can be updated independently of Sentio C…
-
High max 7.5SCA-2026-0009 1 CVE
Vulnerability in several Endress+Hauser products
A vulnerability was discovered in several Endress+Hauser products that can be accessed via ethernet.
-
High max 8.7SCA-2026-0008 1 CVE
Vulnerability Affecting SICK Sentio Creator Extension “Software Deployment Manager”
The pre-installed Software Deployment Manager extension in SICK Sentio Creator is affected by CVE-2026-33151. The Software Deployment Manager extension is maintained and updated independently from SICK Sentio Creator and therefore SICK recommends applying the…
-
High max 7.5
Multiple vulnerabilities in SICK Enterprise Analytics and SICK Logistic Analytics Products
SICK has found multiple vulnerabilities in SICK Enterprise Analytics and the SICK Logistic Analytics products. The vulnerabilities could potentially affect the confidentiality, integrity and availability of the products. Therefore it is strongly recommended t…
first Oct 2, 2025 -
High max 8.3
Vulnerabilities affecting SICK Incoming Goods Suite
SICK has identified multiple vulnerabilities in the SICK Incoming Goods Suite product. Vulnerabilities related to Grafana apply exclusively to the administrative user interface for log management and do not affect the Incoming Goods Suite user interface. The …
first Jan 15, 2026 -
High max 8.2SCA-2025-0014 1 CVE
CodeMeter vulnerablity affects SICK CODE-LOC and SICK LIDAR-LOC
A vulnerability in the CodeMeter runtime affects the SICK products SICK CODE-LOC and SICK LIDAR-LOC. This could potentially affect the integrity, confidentiality and availability of the products. Only systems running on Microsoft Windows are affected. Further…
-
High max 8.6SCA-2025-0008 19 CVEs
Multiple vulnerabilities in Endress+Hauser MEAC300-FNADE4
Several vulnerabilities in the Endress+Hauser MEAC300-FNADE4 were discovered, that can be accessed via Ethernet.
-
High max 8.8
Multiple vulnerabilities in SICK Field Analytics and SICK Media Server
SICK has found multiple vulnerabilities in the products SICK Field Analytics and SICK Media Server. The vulnerabilities could potentially affect the confidentiality, integrity an availability of the products. Therefore it is strongly recommended to apply gene…
-
High max 7.5
Vulnerabilities in SICK Flexi Compact
SICK has found two vulnerabilities that affect the SICK Flexi Compact. The vulnerabilities may affect the availability and confidentiality of the products. SICK is currently not aware of any public exploits.
-
High max 8.8
Vulnerability in SICK Lector8xx and SICK InspectorP8xx
SICK has found two vulnerabilities that affect the SICK Lector8xx and SICK InspectorP8xx. The vulnerabilities may allow a remote low priviledged attacker to run arbitrary shell commands by manipulating the firmware file or executing low-level functions. SICK …
-
High
Vulnerability in SICK OLM
SICK received a report about a vulnerability in the SICK Support Portal supportportal.sick.com, which was hosted and operated by a third-party service provider. Due to a misconfiguration, the access restriction of a NFS (Network File System) storage system ha…
-
High max 8.8
Vulnerability in SICK Incoming Goods Suite
SICK found a vulnerability in the Incoming Goods Suite which allows privilege escalation to the administrative level. Currently SICK is not aware of any public exploits specifically targeting the vulnerability. SICK has released a new version and strongly rec…
-
High max 7.5
Vulnerability in SICK MSC800
SICK found a security vulnerability in the SICK MSC800. This vulnerability allows an unauthenticated attacker to modify the IP address of the product through the SopasET interface, potentially leading to Denial of Service. Currently SICK is not aware of any p…
-
High max 8.8
Vulnerability in multiple SICK Flexi Soft Gateways
The SICK PSIRT received a report about a vulnerability in several Flexi Soft Gateways that could allow an attacker to login to the gateways by sending specially crafted packets and potentially impact the availabilty, integrity and confidentiality of the devic…
-
High max 8.2
-
High max 8.6
Vulnerabilities in SICK ICR890-4
SICK has found several security vulnerabilities in the SICK ICR890-4. If exploited, these could allow an unauthenticated remote attacker to compromise the availability or confidentiality of the SICK ICR890-4. Currently, SICK is not aware of any public exploit…
-
High max 7.5
Vulnerabilities in SICK FTMg
SICK found multiple security vulnerabilities in the SICK FTMg device. If exploited, these potentially allow a remote unauthenticated attacker to impact the availabiltiy or confidentaility of the FTMg device. Currently SICK is not aware of any public exploits …
-
High max 7.5
Vulnerability in SICK Flexi Soft and Flexi Classic Gateways
SICK discovered a vulnerability in several Flexi Classic and Flexi Soft Gateways. If exploited, this potentially allows a remote unauthenticated attacker to impact the availabiltiy of the gateways. SICK is not aware of an exploit targeting this vulnerability.
-
High max 7.5
OpenSSL vulnerability affects multiple SICK SIMs
In March 2022, the OpenSSL development team disclosed a denial of service in versions "3.0.0," "3.0.1," "1.1.1"-"1.1.1m" and "1.0.2-1.0.2zc" of the OpenSSL library. Exploiting this vulnerability allows remote, unauthenticated attackers to cause an infinite lo…
first Aug 8, 2022 -
High
Vulnerability in SICK Flexi Soft Designer & Safety Designer
A deserialization vulnerability in a .NET framework class used by both SICK Flexi Soft Designer and SICK Safety Designer allows an attacker to create malicious project files.
first May 16, 2022 -
High
Vulnerability in SICK Flexi Soft PROFINET IO Gateway FX0-GPNT and SICK microScan3 PROFINET
The PSIRT received a report about a vulnerability in the Gateway Flexi Soft and microScan3 PROFINET. The vulnerability is classified as a denial-of-service vulnerability and results form a mishandling of Read Implicit Request services.
-
High
Vulnerability in SICK Overall Equipment Effectiveness (OEE)
SICK received a report about a vulnerability in the SICK Overall Equipment Effectiveness (OEE). The services under the OEE application are started in the context of system privileges. An attacker can perform a privilege escalation if the application is instal…
-
High max 7.8
PwnKit vulnerability affects multiple SICK IPCs
CVE-2021-4034 is a Local Privilege Escalation (LPE) vulnerability, located in the "Polkit" package installed by default on almost every major distribution of the Linux operating system. On 2022-01-25, Qualys released an advisory for this LPE vulnerability, ad…
-
High
Vulnerabilities in SICK SOPAS ET
SICK received a report from Eden Bar of Claroty about multiple security vulnerabilities in the SICK SOPAS ET software. An unauthorized attacker could potentially craft a malicious SOPAS Device Driver (SDD) file, that if a user imports that file to SOPAS ET co…
first Dec 16, 2021 -
High max 8.8
MEAC affected by Windows SMBv1 vulnerability
Microsoft disclosed a critical security vulnerability in the Microsoft Server Message Block 1.0 (SMBv1) back in 2017. A successful exploitation of this vulnerability could lead to remote code execution with administrator privileges.
-
High max 8.8
Package Analytics affected by Windows TCP/IP vulnerability
Microsoft disclosed a critical vulnerability in the way ICMPv6 Router Advertisement packets are handled on Windows 10 and Windows Server 2019. An attacker who successfully exploited this vulnerability could gain the ability to execute code on the target serve…
-
High
Vulnerability in Platform Mechanism AutoIP
SICK received a report from IOActive that informed SICK about a security vulnerability within the platform mechanism AutoIP, used by multiple devices. SICK recommends updating to the newest version. Refer to the recommended remediations for affected products …
-
High
Vulnerability in SICK FX0-GENT00000 and SICK FX0-GPNT00000
The security-testlab team of Fraunhofer IOSB in Karlsruhe reported a security vulnerability that affects SICK FX0-GPNT00000 and SICK FX0-GENT00000 in the version V3.04.0. The SICK FX0-GPNT00000 and SICK FX0-GENT00000 are vulnerable to a buffer overflow by exp…