Description
Improper Access Control in the SICK ICR890-4 could allow an unauthenticated remote attacker to gather information about the system and download data via the REST API by accessing
unauthenticated endpoints.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| SICK | ICR890-4 | < 2.5.0 | 2.5.0 |
Advisories 1
- SCA-2023-0006 Vulnerabilities in SICK ICR890-4 SICK PSIRT · Jul 10, 2023