Skip to content
OpenAdvisories
High · 7.5 CVE-2023-35696 EUVD-2023-39696GHSA-jw79-3rh8-v6jv

Unauthenticated endpoints in the SICK ICR890-4 could allow an unauthenticated remote attacker to retrieve sensitive information about the d…

Published Jul 10, 2023 · Updated Jun 1, 2026 · Assigned by SICK AG

Vendor: SICK Product: ICR890-4

Description

Unauthenticated endpoints in the SICK ICR890-4 could allow an unauthenticated
remote attacker to retrieve sensitive information about the device via HTTP requests.

Affected products

VendorProductAffectedFixed
SICK ICR890-4 < 2.5.0 2.5.0

Advisories 1

References