Vendor
SICK
116 known vulnerabilities.
Products
5 results · Clear filters · Feed
-
Low 3.8
An attacker with administrative access may inject malicious content into the login page, potentially enabling cross-sit…
-
Low 2.7
Information Disclosure Through Stacktrace
When an error occurs in the application a full stacktrace is provided to the user. The stacktrace lists class and method names as well as other internal information. An attacker thus receives information about the technology used and the structure of the appl…
-
Low 3.8
Unlimited user creation by authorized users
A user with the appropriate authorization can create any number of user accounts via an API endpoint using a POST request. There are no quotas, checking mechanisms or restrictions to limit the creation.
-
Low 3.1
Poor quality of randomness in authorization tokens
The Media Server’s authorization tokens have a poor quality of randomness. An attacker may be able to guess the token of an active user by computing plausible tokens.
-
Low 3.7
Reuse of salt
The device’s passwords have not been adequately salted, making them vulnerable to password extraction attacks.