SICK SIM Series Access Control Vulnerability

SICK SIM Series is a series of sensor integrators from SICK, Germany. An access control error vulnerability exists in the SICK SIM1004 Partnumber 1098148 version firmware prior to version 2.0.0, which stems from a vulnerability that allows an unprivileged, remote attacker to access a user level...

CVE-2022-27582

CVE-2022-27582 affects SICK SIM4000 (PPC) Partnumber 1078787, with versions <= 1.10.1. A password recovery mechanism allows an unprivileged remote attacker to gain access to the user level RecoverableUserLevel, resulting in privilege elevation and impact to confidentiality, integrity, and avai...

SICK SIM Series Access Control Vulnerability

SICK SIM Series is a series of sensor integrators from SICK, Germany. An access control error vulnerability exists in SICK SIM Series 2x00 ARM Partnumber 1092673 and 1081902 version 1.2.0 and earlier. An attacker accesses a user level defined as RecoverableUserLevel by invoking the Password...

CVE-2022-43989: Missing Authentication for Critical Function

Password recovery vulnerability in SICK SIM2x00 ARM Partnumber 1092673 and 1081902 with firmware version = 1.2.0 as soon as possible available in SICK Support Portal...

CVE-2022-27584

The CVE-2022-27584 entry describes a password recovery vulnerability in SICK SIM2000ST (Partnumber 1080579) where an unprivileged, remote attacker can invoke the password recovery mechanism to gain access at RecoverableUserLevel, increasing privileges and impacting confidentiality, integrity, and...

CVE-2022-27585

This CVE affects SICK SIM1000 FX devices (Partnumbers 1097816/1097817) with firmware versions prior to 1.6.0. The vulnerability arises from a flawed password recovery mechanism that allows an unprivileged, remote attacker to invoke password recovery and obtain access at RecoverableUserLevel, incr...

CVE-2022-43990

Password recovery vulnerability in SICK SIM1012 Partnumber 1098146 with firmware version = 2.2.0 as soon as possible available in SICK Support Portal...

CVE-2022-27584: Missing Authentication for Critical Function

Password recovery vulnerability in SICK SIM2000ST Partnumber 1080579 allows an unprivileged remote attacker to gain access to the userlevel defined as RecoverableUserLevel by invocating the password recovery mechanism method. This leads to an increase in their privileges on the system and thereby...

SICK SIM Series Access Control Vulnerability

SICK SIM Series is a series of sensor integrators from SICK, Germany. An access control error vulnerability exists in SICK SIM Series 1012 Partnumber 1098146 versions prior to 2.2.0. An attacker accesses a user level defined as RecoverableUserLevel by invoking the password recovery mechanism meth...

SICK SIM Series Access Control Vulnerability

SICK SIM Series is a series of sensor integrators from SICK, Germany. An access control error vulnerability exists in SICK SIM Series FX Partnumber versions 1097816 and 1097817 firmware versions prior to 1.6.0, which stems from a vulnerability that allows an unprivileged, remote attacker to acces...

PT-2022-18507 · Sick · Sick Sim1000 Fx

Name of the Vulnerable Software and Affected Versions: SICK SIM1000 FX Partnumber 1097816 and 1097817 versions prior to 1.6.0 Description: A password recovery issue allows an unprivileged remote attacker to gain access to the user level defined as RecoverableUserLevel by invoking the password...

CVE-2022-43989

Password recovery vulnerability in SICK SIM2x00 ARM Partnumber 1092673 and 1081902 with firmware version = 1.2.0 as soon as possible available in SICK Support Portal...

CVE-2022-43990: Missing Authentication for Critical Function

Password recovery vulnerability in SICK SIM1012 Partnumber 1098146 with firmware version = 2.2.0 as soon as possible available in SICK Support Portal...

SICK SIM Series Access Control Vulnerability

SICK SIM Series is a series of sensor integrators from SICK, Germany. An access control error vulnerability exists in the SICK SIM Series 4000 PPC Partnumber 1078787 version, which stems from a vulnerability that allows an unprivileged, remote attacker to access a user level defined as...

SICK SIM Series Access Control Vulnerability

SICK SIM Series is a series of sensor integrators from SICK, Germany. An access control error vulnerability exists in SICK SIM Series Partnumber versions 2086502 and 1080579, which stems from a vulnerability that allows an unprivileged, remote attacker to access a user level defined as...

SICK Flexi Compact security vulnerabilities

SICK Flexi Compact is a safety controller from SICK Germany. A security vulnerability exists in the SICK Flexi Compact FLX3-CPUC1 and FLX3-CPUC2, which arises from a remote, unprivileged attacker being able to interact with the running configuration interface thereby potentially affecting the...

Password recovery vulnerability affects multiple SICK SIMs

SICK received a report about a vulnerability in multiple SICK SIM products. The vulnerability is classified as a "Missing Authentication for Critical Function" vulnerability and results from a mishandling of access to a password recovery mechanism. It is possible for an unprivileged, remote user ...

Playing Doom on a John Deere tractor with Sick Codes: Lock and Code S03E18

In 1993, the video game developers at id Software released Doom, a first-person shooter that placed a nameless protagonist into the fiery depths of hell, equipped with an arsenal of weapons to mow down imps, demons, lost souls, and the intimidating "Barons of Hell." In 2022, the hacker Sick Codes...

OpenSSL vulnerability affects multiple SICK SIMs

In March 2022, the OpenSSL development team disclosed a denial of service in versions "3.0.0," "3.0.1," "1.1.1"-"1.1.1m" and "1.0.2-1.0.2zc" of the OpenSSL library. Exploiting this vulnerability allows remote, unauthenticated attackers to cause an infinite loop. It is possible to trigger the...

SICK FTMg security vulnerability

The SICK FTMg is a flow sensor from SICK. A security vulnerability exists in SICK FTMg versions prior to 2.8, which stems from the fact that an unauthenticated user can access sensitive Web URLs via a GET request, which should be limited to maintenance users only. A malicious attacker could use...