CVE-2022-27585

This CVE affects SICK SIM1000 FX devices (Partnumbers 1097816/1097817) with firmware versions prior to 1.6.0. The vulnerability arises from a flawed password recovery mechanism that allows an unprivileged, remote attacker to invoke password recovery and obtain access at RecoverableUserLevel, incr...

CVE-2022-27582

CVE-2022-27582 affects SICK SIM4000 (PPC) Partnumber 1078787, with versions <= 1.10.1. A password recovery mechanism allows an unprivileged remote attacker to gain access to the user level RecoverableUserLevel, resulting in privilege elevation and impact to confidentiality, integrity, and avai...