Improper access control

2023-07-1016:15:00

PRIOn knowledge base

www.prio-n.com

improper access control

sick icr890-4

unauthenticated remote attacker

availability

changing settings

ip address

missing access control

nvd

7.6 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

40.4%

JSON

Improper Access Control in the SICK ICR890-4 could allow an unauthenticated remote attacker to affect the availability of the device by changing settings of the device such as the IP
address based on missing access control.

CPENameOperatorVersion
icr890-4_firmwarelt2.5.0

CPE	Name	Operator	Version
	icr890-4_firmware	lt	2.5.0

References

sick.com/.well-known/csaf/white/2023/sca-2023-0006.json

sick.com/.well-known/csaf/white/2023/sca-2023-0006.pdf

sick.com/psirt