Improper access control

2023-07-1016:15:00

PRIOn knowledge base

www.prio-n.com

access control

sick icr890-4

unauthenticated remote attacker

rest api

data download

7.5 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

41.0%

JSON

Improper Access Control in the SICK ICR890-4 could allow an unauthenticated remote attacker to gather information about the system and download data via the REST API by accessing
unauthenticated endpoints.

CPENameOperatorVersion
icr890-4_firmwarelt2.5.0

CPE	Name	Operator	Version
	icr890-4_firmware	lt	2.5.0

References

sick.com/.well-known/csaf/white/2023/sca-2023-0006.json

sick.com/.well-known/csaf/white/2023/sca-2023-0006.pdf

sick.com/psirt