Vendor
SICK
116 known vulnerabilities.
Products
57 results · Clear filters · Feed
-
Medium 5.3
No brute-force protection
The product does not implement sufficient measures to prevent multiple failed authentication attempts within a short time frame, making it susceptible to brute-force attacks.
-
Medium 5.5
Stored Cross-Site-Script
The web application is susceptible to cross-site-scripting attacks. An attacker who can create new dashboard widgets can inject malicious JavaScript code into the Transform Function which will be executed when the widget receives data from its data source.
-
Medium 5.3
DoS attack by conducting a slowloris-type attack
The multiScan and picoScan are vulnerable to a denial-of-service (DoS) attack. A remote attacker can exploit this vulnerability by conducting a Slowloris-type attack, causing the web page to become unresponsive.
-
Medium 5.6
SICK InspectorP61x and SICK InspectorP62x are vulnerable for a replay attack
The authentication process to the web server uses a challenge response procedure which inludes the nonce and additional information. This challenge can be used several times for login and is therefore vulnerable for a replay attack.
-
Medium 4.3
Improper Restriction of Rendered UI Layers or Frames in RDT400 in SICK APU allows an unprivileged remote attacker to po…
-
Medium 5.3
Insufficient Control Flow Management in RDT400 in SICK APU allows an unprivileged remote attacker to potentially enable…
-
Medium 5.3
Files or Directories Accessible to External Parties in RDT400 in SICK APU allows an unprivileged remote attacker to dow…
-
Medium 5.9
Cleartext Transmission of Sensitive Information in RDT400 in SICK APU allows an unprivileged remote attacker to retriev…
-
Medium 6.5
Modification of Assumed-Immutable Data (MAID) in RDT400 in SICK APU allows an unprivileged remote attacker to make the …
-
Medium 5.3
Cleartext Storage on Disk in the SICK ICR890-4 could allow an unauthenticated attacker with local access to the device …
-
Medium 5.3
Observable Response Discrepancy in the SICK ICR890-4 could allow a remote attacker to identify valid usernames for the …
-
Medium 5.3
Improper Restriction of Excessive Authentication Attempts in the SICK ICR890-4 could allow a remote attacker to brute-f…
-
Medium 5.3
Uncontrolled Resource Consumption in SICK FTMg AIR FLOW SENSOR with Partnumbers 1100214, 1100215, 1100216, 1120114, 112…
-
Medium 5.3
Cleartext Storage of Sensitive Information in SICK FTMg AIR FLOW SENSOR with Partnumbers 1100214, 1100215, 1100216, 112…
-
Medium 6.2
Use of Password Hash Instead of Password for Authentication in SICK FTMg AIR FLOW SENSOR with Partnumbers 1100214, 1100…
-
Medium 5.3
Observable Response Discrepancy in SICK FTMg AIR FLOW SENSOR with Partnumbers 1100214, 1100215, 1100216, 1120114, 11201…
-
Medium 5.3
Inclusion of Sensitive Information in Source Code in SICK FTMg AIR FLOW SENSOR with Partnumbers 1100214, 1100215, 11002…