Vendor
SICK
116 known vulnerabilities.
Products
57 results · Clear filters · Feed
-
Medium 6.5
An attacker may exploit the use of outdated and weak MAC algorithms in the device’s SSH service to potentially compromi…
-
Medium 6.5
An attacker may exploit the use of weak CBC-based cipher suites in the device’s SSH service to potentially observe or m…
-
Medium 4.3
Certain error messages returned by the application expose internal system details that should not be visible to end use…
-
Medium 5.3
The application discloses all used components, versions and license information to unauthenticated actors, giving attac…
-
Medium 5.3
Certain requests pass the authentication token in the URL as string query parameter, making it vulnerable to theft thro…
-
Medium 4.3
An attacker may exploit missing protection against clickjacking by tricking users into performing unintended actions th…
-
Medium 4.3
Improper input handling in a system endpoint may allow attackers to overload resources, causing a denial of service.
-
Medium 4.3
An attacker with low privileges may be able to trigger critical system functions such as reboot or factory reset withou…
-
Medium 4.3
An attacker with low privileges may be able to read files from specific directories on the device, potentially exposing…
-
Medium 4.3
An attacker with limited permissions may still be able to write files to specific locations on the device, potentially …
-
Medium 4.3
Improper handling of a URL parameter may allow attackers to execute code in a user's browser after login. This can lead…
-
Medium 4.3
Improper validation of a login parameter may allow attackers to redirect users to malicious websites after authenticati…
-
Medium 5.3
Firmware update files may expose password hashes for system accounts, which could allow a remote attacker to recover cr…
-
Medium 4.3
Denial-of-service (DoS) via chunk size mismatch
An attacker may cause chunk-size mismatches that block file transfers and prevent subsequent transfers.
-
Medium 6.5
Denial-of-service (DoS) via delayed or missing client response
An attacker who tampers with the C++ CLI client may crash the UpdateService during file transfers, disrupting updates and availability.
-
Medium 5.5
Denial-of-service (DoS) via resource consumption
An attacker that gains SSH access to an unprivileged account may be able to disrupt services (including SSH), causing persistent loss of availability.
-
Medium 5.3
Username Disclosure Through Missing Authentication
Due to a lack of authentication, it is possible for an unauthenticated user to request data from this endpoint, making the application vulnerable for user enumeration.
-
Medium 6.5
Path Traversal
A remote, unauthorized attacker can brute force folders and files and read them like private keys or configurations, making the application vulnerable for gathering sensitive information.
-
Medium 6.5
Path traversal
It's possible to brute force folders and files, what can be used by an attacker to steal sensitve information.
-
Medium 6.5
Improper Restriction of Excessive Authentication Attempts
The application does not implement sufficient measures to prevent multiple failed authentication attempts within a short time frame, making it possible for an attacker to guess user credentials.
-
Medium 5.3
User Enumeration by excessive error output
For failed login attempts, the application returns different error messages depending on whether the login failed due to an incorrect password or a non-existing username. This allows an attacker to guess usernames until they find an existing one.
-
Medium 5.3
Sensitive Information Disclosure Through Missing Authentication
Multiple endpoints with sensitive information do not require authentication, making the application susceptible to information gathering.
-
Medium 5.3
Plain Text Transmission of Username and Password in the URL
In the HTTP request, the username and password are transferred directly in the URL as parameters. However, URLs can be stored in various systems such as server logs, browser histories or proxy servers. As a result, there is a high risk that this sensitive dat…
-
Medium 5.3
User Enumeration
The application provides access to a login protected H2 database for caching purposes. The username is prefilled.
-
Medium 5.3
Uncontrolled Resource Consumption via log file
If a user tries to login but the provided credentials are incorrect a log is created. The data for this POST requests is not validated and it’s possible to send giant payloads which are then logged.
-
Medium 4.3
Information Disclosure Through Stacktrace-/MQTT/Config/changeAll
When an error occurs in the application a full stacktrace is provided to the user. The stacktrace lists class and method names as well as other internal information. An attacker can thus obtain information about the technology used and the structure of the ap…
-
Medium 6.5
Injection via log file
An API endpoint allows arbitrary log entries to be created via POST request. Without sufficient validation of the input data, an attacker can create manipulated log entries and thus falsify or dilute logs, for example.
-
Medium 4.3
The credentials of the users stored in the system's local database can be used for the log in, making it possible for a…
-
Medium 4.5
Cross Site Scripting: Session Hijacking
JavaScript can be ran inside the address bar via the dashboard "Open in new Tab" Button, making the application vulnerable to session hijacking.
-
Medium 6.5
Unencrypted backup contains sensitive information
The created backup files are unencrypted, making the application vulnerable for gathering sensitive information by downloading and decompressing the backup files.
-
Medium 6.5
Deprecated TLS version supported
The application uses a weak password hash function, allowing an attacker to crack the weak password hash to gain access to an FTP user account.
-
Medium 6.5
Deprecated TLS version supported
A service supports the use of a deprecated and unsafe TLS version. This could be exploited to expose sensitive information, modify data in unexpected ways or spoof identities of other users or devices, affecting the confidentiality and integrity of the device.
-
Medium 5.3
No protection against brute-force attacks
The FTP server’s login mechanism does not restrict authentication attempts, allowing an attacker to brute-force user passwords and potentially compromising the FTP server.
-
Medium 4.2
Missing HTTP Security Headers
The application fails to implement several security headers. These headers help increase the overall security level of the web application by e.g., preventing the application to be displayed in an iFrame (Clickjacking attacks) or not executing injected malici…
-
Medium 4.3
Clickjacking
The web application is vulnerable to clickjacking attacks. The site can be embedded into another frame, allowing an attacker to trick a user into clicking on something different from what the user perceives. This could potentially reveal confidential informat…
-
Medium 4.8
Dashboards and iFrames can link malicious web content
Linked URLs during the creation of iFrame widgets and dashboards are vulnerable to code execution. The URLs get embedded as iFrame widgets, making it possible to attack other users that access the dashboard by including malicious code. The attack is only poss…
-
Medium 4.3
Server-Side Request Forgery
The application is vulnerable to Server-Side Request Forgery (SSRF). An endpoint can be used to send server internal requests to other ports.
-
Medium 5.3
Cookie missing HttpOnly flag
The HttpOnlyflag of the session cookie \"@@\" is set to false. Since this flag helps preventing access to cookies via client-side scripts, setting the flag to false can lead to a higher possibility of Cross-Side-Scripting attacks which target the stored cooki…
-
Medium 5.3
Sensitive Data in URL
The application sends user credentials as URL parameters instead of POST bodies, making it vulnerable to information gathering.
-
Medium 5.3
User enumeration
For failed login attempts, the application returns different error messages depending on whether the login failed due to an incorrect password or a non-existing username. This allows an attacker to guess usernames until they find an existing one.