Lucene search
+L

681 matches found

CNNVD
CNNVD
•added 2024/12/06 12:00 a.m.•20 views

SICK InspectorP61x和SICK InspectorP62x 安全漏洞

The SICK InspectorP61x and SICK InspectorP62x are both ultra-compact industrial 2D vision sensors from SICK, Germany. A security vulnerability exists in the SICK InspectorP61x and SICK InspectorP62x that stems from the inclusion of random numbers and other information during the response to a que...

5.6CVSS6.6AI score0.00411EPSS
SaveExploits0References6
CNNVD
CNNVD
•added 2024/12/06 12:00 a.m.•15 views

SICK InspectorP61x和SICK InspectorP62x 安全漏洞

The SICK InspectorP61x and SICK InspectorP62x are both ultra-compact industrial 2D vision sensors from SICK, Germany. A security vulnerability exists in the SICK InspectorP61x version prior to 5.0.0, the SICK InspectorP62x version prior to 5.0.0, and the TiM3xx version prior to 5.10.0, which stem...

8.8CVSS7.9AI score0.01105EPSS
SaveExploits0References6
Sick AG
Sick AG
•added 2024/12/06 12:00 a.m.•27 views

Critical vulnerabilities in SICK InspectorP61x, InspectorP62x and TiM3xx

Multiple critical vulnerabilities were found in the SICK products InspectorP61x, InspectorP62x and TiM3xx. If exploited, this potentially allows an attacker to impact availabiltiy, integrity and confidentaility of the products. It is strongly recommended to upgrade the InspectorP61x, InspectorP62...

9CVSS6.7AI score0.01105EPSS
SaveExploits0
Vulnrichment
Vulnrichment
•added 2024/11/19 1:13 p.m.•18 views

CVE-2024-11075 SICK Incoming Goods Suite privilege escalation vulnerability

A vulnerability in the Incoming Goods Suite allows a user with unprivileged access to the underlying system e.g. local or via SSH a privilege escalation to the administrative level due to the usage of component vendor Docker images running with root permissions. Exploiting this misconfiguration...

8.8CVSS7.2AI score0.00208EPSS
SaveExploits0References6
Cvelist
Cvelist
•added 2024/11/19 1:13 p.m.•43 views

CVE-2024-11075 SICK Incoming Goods Suite privilege escalation vulnerability

A vulnerability in the Incoming Goods Suite allows a user with unprivileged access to the underlying system e.g. local or via SSH a privilege escalation to the administrative level due to the usage of component vendor Docker images running with root permissions. Exploiting this misconfiguration...

8.8CVSS0.00208EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
•added 2024/11/19 12:00 a.m.•31 views

PT-2024-8846 · Sick Ag · Sick Ag Products

Name of the Vulnerable Software and Affected Versions: Incoming Goods Suite affected versions not specified SICK AG products affected versions not specified Description: A vulnerability in the Incoming Goods Suite and SICK AG products allows a user with unprivileged access to the underlying syste...

8.8CVSS7.2AI score0.00208EPSS
SaveExploits0References27
CNNVD
CNNVD
•added 2024/11/19 12:00 a.m.•15 views

SICK Incoming Goods Suite 安全漏洞

SICK Incoming Goods Suite is a logistics digital and service software from SICK, Germany. All incoming goods can be scanned manually to easily record goods input and increase transparency. A security vulnerability exists in SICK Incoming Goods Suite that stems from the use of a component vendor...

8.8CVSS6.9AI score0.00208EPSS
SaveExploits0References6
Sick AG
Sick AG
•added 2024/11/19 12:00 a.m.•25 views

Vulnerability in SICK Incoming Goods Suite

SICK found a vulnerability in the Incoming Goods Suite which allows privilege escalation to the administrative level. Currently SICK is not aware of any public exploits specifically targeting the vulnerability. SICK has released a new version and strongly recommends updating to the newest version...

8.8CVSS7.1AI score0.00208EPSS
SaveExploits0
Sick AG
Sick AG
•added 2024/11/07 12:00 p.m.•25 views

Third party vulnerabilities in SICK CDE-100

The SICK CDE-100 uses the open-source libraries FreeRTOS, lwIP and MCU Boot. The used libraries contain vulnerabilities that affect the SICK CDE-100...

9.8CVSS7.8AI score0.01382EPSS
SaveExploits0
BDU FSTEC
BDU FSTEC
•added 2024/10/30 12:00 a.m.•16 views

The vulnerability of SICK CLV6xx, Lector6xx, and RFx6xx devices’ microprogramming software lies in the use of rigidly encoded credentials. This allows unauthorized individuals to gain unauthorized access to protected information and elevate their privileges to the role of “Authorized Client”.

The vulnerability of the microprogramming software used in SICK CLV6xx, Lector6xx, and RFx6xx devices is related to the use of rigidly encoded credentials. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information and elevate the...

9.4CVSS5.5AI score0.00753EPSS
SaveExploits0References5
Sick AG
Sick AG
•added 2024/10/17 1:00 p.m.•23 views

Critical vulnerability in multiple SICK products

A critical vulnerability has been discovered in the .sdd files of several SICK products. This vulnerability could allow a remote, unauthenticated attacker to gain access to the "Authorized Client" user role, potentially impacting the availability and integrity of the affected SICK products. Users...

9.1CVSS7.2AI score0.00753EPSS
SaveExploits0
NVD
NVD
•added 2024/10/17 10:15 a.m.•21 views

CVE-2024-10025

A vulnerability in the .sdd file allows an attacker to read default passwords stored in plain text within the code. By exploiting these plaintext credentials, an attacker can log into affected SICK products as an “Authorized Client” if the customer has not changed the default password...

9.1CVSS0.00753EPSS
SaveExploits0References6
Cvelist
Cvelist
•added 2024/10/17 9:58 a.m.•37 views

CVE-2024-10025 Vulnerability in SICK CLV6xx, SICK Lector6xx and SICK RFx6xx

A vulnerability in the .sdd file allows an attacker to read default passwords stored in plain text within the code. By exploiting these plaintext credentials, an attacker can log into affected SICK products as an “Authorized Client” if the customer has not changed the default password...

9.1CVSS0.00753EPSS
SaveExploits0References6
Vulnrichment
Vulnrichment
•added 2024/10/17 9:58 a.m.•23 views

CVE-2024-10025 Vulnerability in SICK CLV6xx, SICK Lector6xx and SICK RFx6xx

A vulnerability in the .sdd file allows an attacker to read default passwords stored in plain text within the code. By exploiting these plaintext credentials, an attacker can log into affected SICK products as an “Authorized Client” if the customer has not changed the default password...

9.1CVSS6.5AI score0.00753EPSS
SaveExploits0References6
CVE
CVE
•added 2024/10/17 9:58 a.m.•76 views

CVE-2024-10025

The CVE describes a vulnerability in the .sdd files of SICK CLV6xx, Lector6xx and RFx6xx products where an attacker can read default passwords stored in plaintext in the code. Exploitation enables logging in as an “Authorized Client” if the customer did not change the default password, potentiall...

9.1CVSS9.1AI score0.00753EPSS
SaveExploits0References6
CNNVD
CNNVD
•added 2024/10/17 12:00 a.m.•21 views

SICK多款产品 安全漏洞

SICK CLV6xx and others are products from SICK, Germany.SICK CLV6xx is a series of stationary barcode scanners.SICK Lector6xx is a series of code readers.SICK RFx6xx is a series of RFID readers.SICK Lector6xx is a series of code readers.SICK Lector6xx is a series of code readers.SICK Lector6xx is ...

9.1CVSS6.8AI score0.00753EPSS
SaveExploits0References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/10/17 12:00 a.m.•3 views

CVE-2024-10025: Use of Hard-coded Credentials

A vulnerability in the .sdd file allows an attacker to read default passwords stored in plain text within the code. By exploiting these plaintext credentials, an attacker can log into affected SICK products as an “Authorized Client” if the customer has not changed the default password...

9.1CVSS8.1AI score0.00753EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2024/10/16 12:00 a.m.•7 views

PT-2024-7394

Name of the Vulnerable Software and Affected Versions: SICK products affected versions not specified Description: A vulnerability in the .sdd file allows an attacker to read default passwords stored in plain text within the code. By exploiting these plaintext credentials, an attacker can log into...

9.4CVSS5.8AI score0.00753EPSS
SaveExploits0References29
Cvelist
Cvelist
•added 2024/09/12 9:38 p.m.•43 views

CVE-2024-8751 CVE-2024-8751

A vulnerability allows a remote unauthenticated attacker to modify the prod uct’s IP address over the Sopas ET interface. This can lead to a Denial of Service attack...

7.5CVSS0.00934EPSS
SaveExploits0References9
Vulnrichment
Vulnrichment
•added 2024/09/12 9:38 p.m.•11 views

CVE-2024-8751 CVE-2024-8751

A vulnerability allows a remote unauthenticated attacker to modify the prod uct’s IP address over the Sopas ET interface. This can lead to a Denial of Service attack...

7.5CVSS6.1AI score0.00934EPSS
SaveExploits0References9
Rows per page
Query Builder