Vendor
SICK
116 known vulnerabilities.
SICK at a glance
- Last 12 months
- 23
- Critical · all time
- 15
- Exploited · all time
- 0
- Public exploit · all time
- 0
Show as table
| Month | Vulnerabilities | Critical |
|---|---|---|
| Nov 2026 | 0 | 0 |
| Oct 2026 | 1 | 0 |
| Sep 2026 | 1 | 0 |
| Aug 2026 | 0 | 0 |
| Jul 2026 | 1 | 1 |
| Jun 2026 | 0 | 0 |
| May 2026 | 0 | 0 |
| Apr 2026 | 0 | 0 |
| Mar 2026 | 2 | 2 |
| Feb 2026 | 2 | 0 |
| Jan 2026 | 16 | 2 |
| Dec 2025 | 0 | 0 |
| Nov 2025 | 0 | 0 |
| Oct 2025 | 20 | 0 |
| Sep 2025 | 0 | 0 |
| Aug 2025 | 0 | 0 |
| Jul 2025 | 0 | 0 |
| Jun 2025 | 20 | 0 |
| May 2025 | 0 | 0 |
| Apr 2025 | 3 | 0 |
| Mar 2025 | 3 | 2 |
| Feb 2025 | 3 | 1 |
| Jan 2025 | 0 | 0 |
| Dec 2024 | 6 | 1 |
Products
Latest advisories
-
Critical max 9.2
SICK Products affected by Brotli Vulnerability (Broccoli2Shell)
SICK identified multiple products affected by the Brotli vulnerability, also known as Broccoli2Shell (CVE-2026-111497). Successful exploitation of this vulnerability could impact the confidentiality, integrity, and availability of affected systems. At the tim…
-
Critical max 10.0SCA-2026-0016 2 CVEs
Vulnerabilities Affecting SICK CorivaHub
SICK CorivaHub includes the third-party components Apache Tomcat and MapLibre GL, which are affected by two known vulnerabilities. These vulnerabilities include an improper input validation issue in Apache Tomcat and a vulnerability in MapLibre GL that could …
-
High max 7.5SCA-2026-0015 1 CVE
Vulnerability Affecting Sick_Safetyscanners_Base CPP Driver
An out-of-bounds read vulnerability exists in the open-source repository sick_safetyscanners_base (https://github.com/SICKAG/sick_safetyscanners_base), a standalone C++ driver library for SICK safety laser scanners. A specially crafted network packet could ca…
-
Critical max 9.3SCA-2026-0014 3 CVEs
Fast-xml-parser vulnerabilities affect Sentio Creator Extension 'Device Manager'
Multiple vulnerabilities in the third-party component fast-xml-parser affect the Device Manager Extension in Sentio Creator. The extension is maintained and updated independently from SICK Sentio Creator, but successful exploitation of these vulnerabilities c…
-
High max 8.6
Vulnerabilities in Wibu Systems CodeMeter Runtime Affect Multiple SICK Products
Several vulnerabilities in the Wibu Systems CodeMeter Runtime affect the SICK products Sentio Creator, Sentio Compose, Safety Designer, Stream Editor, CODE-LOC, LiDAR-LOC, PLB, SIM1200-2A1A130 LiDAR-LOC and multiple SICK Industrial PCs (APU0G00, APU0G50, APU0…
first Sep 4, 2026
116 results · Feed
-
High 7.5
CVE-2026-101290
A remote attacker may send a specially crafted network packet that causes the affected application to perform an out-of-bounds memory read due to insufficient validation of packet length. This may result in an application crash and a denial-of-service conditi…
-
High 8.3
CVE-2026-80469
An attacker may achieve arbitrary code execution on a target system by uploading a malicious device driver package, bypassing driver verification mechanisms, and triggering the execution of attacker-controlled code. User interaction is required.
-
Critical 9.4
CVE-2026-11841
An attacker may perform unauthenticated read and write operations on sensitive filesystem areas via the AppEngine Fileaccess over HTTP due to improper access restrictions. A critical filesystem directory was unintentionally exposed through the HTTP-based file…
-
Critical 9.8
CVE-2026-2331
An attacker may perform unauthenticated read and write operations on sensitive filesystem areas via the AppEngine Fileaccess over HTTP due to improper access restrictions. A critical filesystem directory was unintentionally exposed through the HTTP-based file…
-
Critical 9.4
CVE-2026-2330
An attacker may access restricted filesystem areas on the device via the CROWN REST interface due to incomplete whitelist enforcement. Certain directories intended for internal testing were not covered by the whitelist and are accessible without authenticatio…
-
Medium 6.5
An attacker may exploit the use of outdated and weak MAC algorithms in the device’s SSH service to potentially compromi…
-
Medium 6.5
An attacker may exploit the use of weak CBC-based cipher suites in the device’s SSH service to potentially observe or m…
-
Medium 4.3
Certain error messages returned by the application expose internal system details that should not be visible to end use…
-
Medium 5.3
The application discloses all used components, versions and license information to unauthenticated actors, giving attac…
-
Medium 5.3
Certain requests pass the authentication token in the URL as string query parameter, making it vulnerable to theft thro…
-
Low 3.8
An attacker with administrative access may inject malicious content into the login page, potentially enabling cross-sit…
-
Medium 4.3
An attacker may exploit missing protection against clickjacking by tricking users into performing unintended actions th…
-
Medium 4.3
Improper input handling in a system endpoint may allow attackers to overload resources, causing a denial of service.
-
Medium 4.3
An attacker with low privileges may be able to trigger critical system functions such as reboot or factory reset withou…
-
Medium 4.3
An attacker with low privileges may be able to read files from specific directories on the device, potentially exposing…
-
Medium 4.3
An attacker with limited permissions may still be able to write files to specific locations on the device, potentially …
-
Medium 4.3
Improper handling of a URL parameter may allow attackers to execute code in a user's browser after login. This can lead…
-
Medium 4.3
Improper validation of a login parameter may allow attackers to redirect users to malicious websites after authenticati…
-
Medium 5.3
Firmware update files may expose password hashes for system accounts, which could allow a remote attacker to recover cr…
-
High 7.5
The device is deployed with weak and publicly known default passwords for certain hidden user levels, increasing the ri…
-
High 7.5
Certain system functions may be accessed without proper authorization, allowing attackers to start, stop, or delete ins…
-
Critical 9.1
Uploading unvalidated container images may allow remote attackers to gain full access to the system, potentially compro…
-
Critical 9.9
An attacker may gain unauthorized access to the host filesystem, potentially allowing them to read and modify system da…
-
Medium 4.3
Denial-of-service (DoS) via chunk size mismatch
An attacker may cause chunk-size mismatches that block file transfers and prevent subsequent transfers.
-
Medium 6.5
Denial-of-service (DoS) via delayed or missing client response
An attacker who tampers with the C++ CLI client may crash the UpdateService during file transfers, disrupting updates and availability.
-
High 7.6
API does not require authentication
A remote unauthenticated attacker may use the unauthenticated C++ API to access or modify sensitive data and disrupt services.
-
High 7.5
Unsecure access configuration
The system is deployed in its default state, with configuration settings that do not comply with the latest best practices for restricting access. This increases the risk of unauthorised connections.
-
Medium 5.5
Denial-of-service (DoS) via resource consumption
An attacker that gains SSH access to an unprivileged account may be able to disrupt services (including SSH), causing persistent loss of availability.
-
Medium 5.3
Username Disclosure Through Missing Authentication
Due to a lack of authentication, it is possible for an unauthenticated user to request data from this endpoint, making the application vulnerable for user enumeration.
-
Medium 6.5
Path Traversal
A remote, unauthorized attacker can brute force folders and files and read them like private keys or configurations, making the application vulnerable for gathering sensitive information.
-
Medium 6.5
Path traversal
It's possible to brute force folders and files, what can be used by an attacker to steal sensitve information.
-
Low 2.7
Information Disclosure Through Stacktrace
When an error occurs in the application a full stacktrace is provided to the user. The stacktrace lists class and method names as well as other internal information. An attacker thus receives information about the technology used and the structure of the appl…
-
Medium 6.5
Improper Restriction of Excessive Authentication Attempts
The application does not implement sufficient measures to prevent multiple failed authentication attempts within a short time frame, making it possible for an attacker to guess user credentials.
-
Medium 5.3
User Enumeration by excessive error output
For failed login attempts, the application returns different error messages depending on whether the login failed due to an incorrect password or a non-existing username. This allows an attacker to guess usernames until they find an existing one.
-
Medium 5.3
Sensitive Information Disclosure Through Missing Authentication
Multiple endpoints with sensitive information do not require authentication, making the application susceptible to information gathering.
-
Medium 5.3
Plain Text Transmission of Username and Password in the URL
In the HTTP request, the username and password are transferred directly in the URL as parameters. However, URLs can be stored in various systems such as server logs, browser histories or proxy servers. As a result, there is a high risk that this sensitive dat…
-
Medium 5.3
User Enumeration
The application provides access to a login protected H2 database for caching purposes. The username is prefilled.
-
Medium 5.3
Uncontrolled Resource Consumption via log file
If a user tries to login but the provided credentials are incorrect a log is created. The data for this POST requests is not validated and it’s possible to send giant payloads which are then logged.
-
Medium 4.3
Information Disclosure Through Stacktrace-/MQTT/Config/changeAll
When an error occurs in the application a full stacktrace is provided to the user. The stacktrace lists class and method names as well as other internal information. An attacker can thus obtain information about the technology used and the structure of the ap…
-
Medium 6.5
Injection via log file
An API endpoint allows arbitrary log entries to be created via POST request. Without sufficient validation of the input data, an attacker can create manipulated log entries and thus falsify or dilute logs, for example.