Medium · 5.3 CVE-2023-35699 EUVD-2023-39699GHSA-fq7j-mj26-w42x

Cleartext Storage on Disk in the SICK ICR890-4 could allow an unauthenticated attacker with local access to the device to disclose sensitiv…

Published Jul 10, 2023 · Updated Jun 1, 2026 · Assigned by SICK AG

Description

Cleartext Storage on Disk in the SICK ICR890-4 could allow an unauthenticated attacker with local access to the device to disclose sensitive information by accessing a SD card.

Affected products

Vendor	Product	Affected	Fixed
SICK	ICR890-4	< 2.5.0	2.5.0

Advisories 1

SCA-2023-0006 Vulnerabilities in SICK ICR890-4 SICK PSIRT · Jul 10, 2023

References

https://sick.com/psirt issue-tracking
https://sick.com/.well-known/csaf/white/2023/sca-2023-0006.pdf vendor-advisory
https://sick.com/.well-known/csaf/white/2023/sca-2023-0006.json

CNA	v3.1	5.3
EUVD	v3.1	5.3