CVE-2020-2077: Incorrect Default Permissions

SICK Package Analytics software up to and including version V04.0.0 are vulnerable due to incorrect default permissions settings. An unauthorized attacker could read sensitive data from the system by querying for known files using the REST API directly...

CVE-2020-10276 RVD#2558: Default credentials on SICK PLC allows disabling safety features

The password for the safety PLC is the default and thus easy to find in manuals, etc.. This allows a manipulated program to be uploaded to the safety PLC, effectively disabling the emergency stop in case an object is too close to the robot. Navigation and any other components dependent on the las...

Security Information Regarding "Profile Programming"

The customer IOActive provided a Security Advisory report to SICK AG referring to the feature profile programming with regards to the listed affected products. Certain SICK products support profile programming with bar codes, generated and printed via SOPAS ET...

CVE-2019-14753

SICK FX0-GPNT00000 and FX0-GENT00000 devices through 3.4.0 have a Buffer Overflow...

CVE-2019-14753

SICK FX0-GPNT00000 and FX0-GENT00000 devices through 3.4.0 have a Buffer Overflow...

Buffer overflow

SICK FX0-GPNT00000 and FX0-GENT00000 devices through 3.4.0 have a Buffer Overflow...

CVE-2019-14753

CVE-2019-14753 affects SICK FX0-GPNT00000 and FX0-GENT00000 up to firmware 3.04.0. The issue is a buffer overflow in UDP handling that can cause the Flexi Soft System to switch to a safety state, with high impact on availability. A firmware update has been released by SICK; applying the new versi...

CVE-2019-14753

SICK FX0-GPNT00000 and FX0-GENT00000 devices through 3.4.0 have a Buffer Overflow...

CVE-2019-14753: Buffer Copy without Checking Size of Input

SICK FX0-GPNT00000 and FX0-GENT00000 devices through 3.4.0 have a Buffer Overflow...

PT-2019-13817

Name of the Vulnerable Software and Affected Versions SICK FX0-GPNT00000 and FX0-GENT00000 devices versions prior to 3.4.1 Description The issue is related to a Buffer Overflow. Recommendations For SICK FX0-GPNT00000 and FX0-GENT00000 devices versions prior to 3.4.1, update to version 3.4.1 or...

Vulnerability in SICK FX0-GENT00000 and SICK FX0-GPNT00000

The security-testlab team of Fraunhofer IOSB in Karlsruhe reported a security vulnerability that affects SICK FX0-GPNT00000 and SICK FX0-GENT00000 in the version V3.04.0. The SICK FX0-GPNT00000 and SICK FX0-GENT00000 are vulnerable to a buffer overflow by exploiting the available resources with U...

CVE-2019-10979

SICK MSC800 all versions prior to Version 4.0, the affected firmware versions contain a hard-coded customer account password...

Hardcoded credentials

SICK MSC800 all versions prior to Version 4.0, the affected firmware versions contain a hard-coded customer account password...

CVE-2019-10979

SICK MSC800 all versions prior to Version 4.0, the affected firmware versions contain a hard-coded customer account password...

CVE-2019-10979

CVE-2019-10979 affects SICK MSC800 firmware all versions prior to 4.0. The vulnerability is caused by a hard-coded customer account password, enabling a remote attacker with network access to potentially reconfigure settings or disrupt device functionality. CVSSv3 base score 9.8 (CRITICAL); attac...

CVE-2019-10979: Use of Hard-coded Credentials

SICK MSC800 all versions prior to Version 4.0, the affected firmware versions contain a hard-coded customer account password...

PT-2019-12119

Name of the Vulnerable Software and Affected Versions SICK MSC800 versions prior to 4.0 Description The issue concerns a hard-coded customer account password in the affected firmware versions. Recommendations For versions prior to 4.0, update to version 4.0 or later to resolve the issue...

Sick Bricks - Base64 encoded String, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Sick Bricks published at the 'play' market has multiple vulnerabilities...

webTA by kronos - XSS

http://www.kronos.com/Products/webTA.htm webTA is used by thousands of fed. employees. I did a limited security review of a couple deployments. Because of certain contractual limitations I have been able to verify XSS in its Project Management module only, but I suspect it also exists in...

webta-xss.txt

http://www.kronos.com/Products/webTA.htm webTA is used by thousands of fed. employees. I did a limited security review of a couple deployments. Because of certain contractual limitations I have been able to verify XSS in its Project Management module only, but I suspect it also exists in...