Skip to content
OpenAdvisories
Medium · 5.3 CVE-2023-35698 EUVD-2023-39698GHSA-4fq5-58j6-9qph

Observable Response Discrepancy in the SICK ICR890-4 could allow a remote attacker to identify valid usernames for the FTP server from the …

Published Jul 10, 2023 · Updated Jun 1, 2026 · Assigned by SICK AG

Description

Observable Response Discrepancy in the SICK ICR890-4 could allow a remote attacker to identify valid usernames for the FTP server from the response given during a failed login
attempt.

Affected products

VendorProductAffectedFixed
SICK ICR890-4 < 2.5.0 2.5.0

Advisories 1

References