CVE-2019-10979

2019-07-0120:05:10

CWE-798

icscert

www.cve.org

AI Score

9.4

Confidence

High

EPSS

0.009

Percentile

83.4%

JSON

SICK MSC800 all versions prior to Version 4.0, the affected firmware versions contain a hard-coded customer account password.

CNA Affected

[
  {
    "product": "MSC800",
    "vendor": "SICK",
    "versions": [
      {
        "status": "affected",
        "version": "all versions prior to Version 4.0"
      }
    ]
  }
]

References

www.securityfocus.com/bid/108924

www.sick.com/de/en/service-and-support/the-sick-product-security-incident-response-team-sick-psirt/w/psirt/#advisories

www.us-cert.gov/ics/advisories/icsa-19-178-04