Vendor
SICK
116 known vulnerabilities.
Products
TDC-X401GL 15
Baggage Analytics 13
Tire Analytics 13
Package Analytics 13
Logistic Diagnostic Analytics 13
Enterprise Analytics 10
SICK Field Analytics 9
SICK Media Server 9
ICR890-4 9
APU0200 9
SICK FTMG-ESD15AXX AIR FLOW SENSOR 8
SICK FTMG-ESD20AXX AIR FLOW SENSOR 8
SICK FTMG-ESD25AXX AIR FLOW SENSOR 8
SICK FTMG-ESN40SXX AIR FLOW SENSOR 8
SICK FTMG-ESN50SXX AIR FLOW SENSOR 8
SICK FTMG-ESR40SXX AIR FLOW SENSOR 8
SICK FTMG-ESR50SXX AIR FLOW SENSOR 8
SICK InspectorP61x 6
SICK InspectorP62x 6
LMS5xx 4
Field Analytics 3
TLOC100-100 all Firmware versions 3
Incoming Goods Suite 3
SICK DL100-2xxxxxxx 3
SICK Lector8xx 2
SICK InspectorP8xx 2
EventCam App 2
SICK FLX3-CPUC200 2
TiM3xx 2
SICK LMS1000 2
SICK MRS1000 2
MSC800 2
SICK Lector85x 2
SICK Lector83x 2
SIM1012 1
SICK multiScan1XX 1
SICK picoScan1XX 1
FX0-GMOD00000 1
InspectorP61x 1
FX0-GMOD00010 1
116 results · Feed
-
High 7.5
CVE-2024-8751
A vulnerability allows a remote unauthenticated attacker to modify the prod uct’s IP address over the Sopas ET interface. This can lead to a Denial of Service attack.
-
High 8.8
Authentication Bypass by Capture-replay in SICK Flexi Soft Gateways with Partnumbers 1044073, 1127717, 1130282, 1044074…
-
Medium 4.3
Improper Restriction of Rendered UI Layers or Frames in RDT400 in SICK APU allows an unprivileged remote attacker to po…
-
Medium 5.3
Insufficient Control Flow Management in RDT400 in SICK APU allows an unprivileged remote attacker to potentially enable…
-
Medium 5.3
Files or Directories Accessible to External Parties in RDT400 in SICK APU allows an unprivileged remote attacker to dow…
-
Medium 5.9
Cleartext Transmission of Sensitive Information in RDT400 in SICK APU allows an unprivileged remote attacker to retriev…
-
Medium 6.5
Modification of Assumed-Immutable Data (MAID) in RDT400 in SICK APU allows an unprivileged remote attacker to make the …
-
High 7.1
Improper Neutralization of Input During Web Page Generation (’Cross-site Scripting’) in RDT400 in SICK APU allows an un…
-
High 7.5
Improper Restriction of Excessive Authentication Attempts in RDT400 in SICK APU allows an unprivileged remote attacker …
-
High 7.7
Missing Authorization in RDT400 in SICK APU allows an unprivileged remote attacker to modify data via HTTP requests tha…
-
High 8.2
Improper Access Control in SICK APU allows an unprivileged remote attacker to download as well as upload arbitrary file…
-
Critical 9.8
A remote unauthorized attacker may connect to the SIM1012, interact with the device and change configuration settings. …
-
High 7.5
The LMS5xx uses weak hash generation methods, resulting in the creation of insecure hashs. If an attacker manages to re…
-
Critical 9.8
A remote unprivileged attacker can intercept the communication via e.g. Man-In-The-Middle, due to the absence of Transp…
-
Critical 9.8
The LMS5xx uses hard-coded credentials, which potentially allow low-skilled unauthorized remote attackers to reconfigur…
-
High 7.5
A remote unprivileged attacker can sent multiple packages to the LMS5xx to disrupt its availability through a TCP SYN-b…
-
Medium 5.3
Cleartext Storage on Disk in the SICK ICR890-4 could allow an unauthenticated attacker with local access to the device …
-
Medium 5.3
Observable Response Discrepancy in the SICK ICR890-4 could allow a remote attacker to identify valid usernames for the …
-
Medium 5.3
Improper Restriction of Excessive Authentication Attempts in the SICK ICR890-4 could allow a remote attacker to brute-f…
-
High 7.5
Unauthenticated endpoints in the SICK ICR890-4 could allow an unauthenticated remote attacker to retrieve sensitive inf…
-
High 7.5
Improper Access Control in the SICK ICR890-4 could allow an unauthenticated remote attacker to affect the availability …
-
High 7.5
Cleartext Transmission of Sensitive Information in the SICK ICR890-4 could allow a remote attacker to gather sensitive …
-
High 8.2
Improper Access Control in the SICK ICR890-4 could allow an unauthenticated remote attacker to gather information about…
-
High 8.6
Exposure of Sensitive Information to an Unauthorized Actor in the SICK ICR890-4 could allow an unauthenticated remote a…
-
Critical 9.8
A remote unprivileged attacker can modify and access configuration settings on the EventCam App due to the absence of A…
-
Critical 9.8
A remote unprivileged attacker can intercept the communication via e.g. Man-In-The-Middle, due to the absence of Transp…
-
Medium 5.3
Uncontrolled Resource Consumption in SICK FTMg AIR FLOW SENSOR with Partnumbers 1100214, 1100215, 1100216, 1120114, 112…
-
Medium 5.3
Cleartext Storage of Sensitive Information in SICK FTMg AIR FLOW SENSOR with Partnumbers 1100214, 1100215, 1100216, 112…
-
Medium 6.2
Use of Password Hash Instead of Password for Authentication in SICK FTMg AIR FLOW SENSOR with Partnumbers 1100214, 1100…
-
Medium 5.3
Observable Response Discrepancy in SICK FTMg AIR FLOW SENSOR with Partnumbers 1100214, 1100215, 1100216, 1120114, 11201…
-
Medium 5.3
Inclusion of Sensitive Information in Source Code in SICK FTMg AIR FLOW SENSOR with Partnumbers 1100214, 1100215, 11002…
-
High 7.5
Uncontrolled Resource Consumption in SICK FTMg AIR FLOW SENSOR with Partnumbers 1100214, 1100215, 1100216, 1120114, 112…
-
High 7.5
Improper Access Control in SICK FTMg AIR FLOW SENSOR with Partnumbers 1100214, 1100215, 1100216, 1120114, 1120116, 1122…
-
High 7.5
Improper Access Control in SICK FTMg AIR FLOW SENSOR with Partnumbers 1100214, 1100215, 1100216, 1120114, 1120116, 1122…
-
High 7.5
Missing Authentication for Critical Function in SICK Flexi Classic and Flexi Soft Gateways with Partnumbers 1042193, 10…
-
Unscored —
SICK MSC800 all versions prior to Version 4.0, the affected firmware versions contain a hard-coded customer account pas…