Design/Logic Flaw

2023-07-1016:15:00

PRIOn knowledge base

www.prio-n.com

cleartext transmission

sensitive information

remote attacker

network traffic

encryption

7.3 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

49.3%

JSON

Cleartext Transmission of Sensitive Information in the SICK ICR890-4 could allow a
remote attacker to gather sensitive information by intercepting network traffic that is not encrypted.

CPENameOperatorVersion
icr890-4_firmwarelt2.5.0

CPE	Name	Operator	Version
	icr890-4_firmware	lt	2.5.0

References

sick.com/.well-known/csaf/white/2023/sca-2023-0006.json

sick.com/.well-known/csaf/white/2023/sca-2023-0006.pdf

sick.com/psirt