Browse CVEs

CRITICAL 9.8 CVE-2023-43696 Improper Access Control in SICK APU allows an unprivileged remote attacker to download as well as upload arbitrary files via anonymous access to the … Apu0200 Firmware 4.0.0.6+ Fix from $2,3002023-10-09 HIGH 7.5 CVE-2023-43699 Improper Restriction of Excessive Authentication Attempts in RDT400 in SICK APU allows an unprivileged remote attacker to guess the password via tria… Apu0200 Firmware 4.0.0.6+ Fix from $1,9502023-10-09 HIGH 7.5 CVE-2023-43700 Missing Authorization in RDT400 in SICK APU allows an unprivileged remote attacker to modify data via HTTP requests that no not require authenticatio… Apu0200 Firmware 4.0.0.6+ Fix from $1,9502023-10-09 CRITICAL 9.8 CVE-2023-5288 A remote unauthorized attacker may connect to the SIM1012, interact with the device and change configuration settings. The adversary may also reset t… Sim1012 0p0g200 Firmware Mitigation only Fix from $2,3002023-09-29 HIGH 8.8 CVE-2023-4419 The LMS5xx uses hard-coded credentials, which potentially allow low-skilled unauthorized remote attackers to reconfigure settings and /or disrupt the… Lms531 Firmware Mitigation only Fix from $1,9502023-08-24 HIGH 7.4 CVE-2023-4420 A remote unprivileged attacker can intercept the communication via e.g. Man-In-The-Middle, due to the absence of Transport Layer Security (TLS) in th… Lms531 Firmware Mitigation only Fix from $1,9502023-08-24 HIGH 7.5 CVE-2023-4418 A remote unprivileged attacker can sent multiple packages to the LMS5xx to disrupt its availability through a TCP SYN-based denial-of-service (DDoS) … Lms531 Firmware Mitigation only Fix from $1,9502023-08-24 HIGH 7.5 CVE-2023-31412 The LMS5xx uses weak hash generation methods, resulting in the creation of insecure hashs. If an attacker manages to retrieve the hash, it could lead… Lms531 Firmware Mitigation only Fix from $1,9502023-08-24 HIGH 7.5 CVE-2023-3270 Exposure of Sensitive Information to an Unauthorized Actor in the SICK ICR890-4 could allow an unauthenticated remote attacker to retrieve sensitive … Icr890 4 Firmware 2.5.0+ Fix from $1,9502023-07-10 HIGH 7.5 CVE-2023-3271 Improper Access Control in the SICK ICR890-4 could allow an unauthenticated remote attacker to gather information about the system and download data … Icr890 4 Firmware 2.5.0+ Fix from $1,9502023-07-10 HIGH 7.5 CVE-2023-3272 Cleartext Transmission of Sensitive Information in the SICK ICR890-4 could allow a remote attacker to gather sensitive information by intercepting ne… Icr890 4 Firmware 2.5.0+ Fix from $1,9502023-07-10 HIGH 7.5 CVE-2023-3273 Improper Access Control in the SICK ICR890-4 could allow an unauthenticated remote attacker to affect the availability of the device by changing sett… Icr890 4 Firmware 2.5.0+ Fix from $1,9502023-07-10 HIGH 7.5 CVE-2023-35696 Unauthenticated endpoints in the SICK ICR890-4 could allow an unauthenticated remote attacker to retrieve sensitive information about the device via … Icr890 4 Firmware 2.5.0+ Fix from $1,9502023-07-10 HIGH 7.5 CVE-2023-35697 Improper Restriction of Excessive Authentication Attempts in the SICK ICR890-4 could allow a remote attacker to brute-force user credentials. Icr890 4 Firmware 2.5.0+ Fix from $1,9502023-07-10 MEDIUM 5.3 CVE-2023-35698 Observable Response Discrepancy in the SICK ICR890-4 could allow a remote attacker to identify valid usernames for the FTP server from the response g… Icr890 4 Firmware 2.5.0+ Fix from $1,6002023-07-10 CRITICAL 9.8 CVE-2023-31411 A remote unprivileged attacker can modify and access configuration settings on the EventCam App due to the absence of API authentication. The lack of… Sick Eventcam App Mitigation only Fix from $2,3002023-06-19 HIGH 7.4 CVE-2023-31410 A remote unprivileged attacker can intercept the communication via e.g. Man-In-The-Middle, due to the absence of Transport Layer Security (TLS) in th… Sick Eventcam App Mitigation only Fix from $1,9502023-06-19 CRITICAL 9.8 CVE-2023-23450 Use of Password Hash Instead of Password for Authentication in SICK FTMg AIR FLOW SENSOR with Partnumbers 1100214, 1100215, 1100216, 1120114, 1120116… Ftmg Esd20axx Firmware 2.0+ Fix from $2,3002023-05-15 HIGH 7.5 CVE-2023-23445 Improper Access Control in SICK FTMg AIR FLOW SENSOR with Partnumbers 1100214, 1100215, 1100216, 1120114, 1120116, 1122524, 1122526 allows an unprivi… Ftmg Esd20axx Firmware 2.0+ Fix from $1,9502023-05-15 HIGH 7.5 CVE-2023-23446 Improper Access Control in SICK FTMg AIR FLOW SENSOR with Partnumbers 1100214, 1100215, 1100216, 1120114, 1120116, 1122524, 1122526 allows an unprivi… Ftmg Esd20axx Firmware 2.0+ Fix from $1,9502023-05-15 HIGH 7.5 CVE-2023-23447 Uncontrolled Resource Consumption in SICK FTMg AIR FLOW SENSOR with Partnumbers 1100214, 1100215, 1100216, 1120114, 1120116, 1122524, 1122526 allows … Ftmg Esd20axx Firmware 2.0+ Fix from $1,9502023-05-15 HIGH 7.5 CVE-2023-31408 Cleartext Storage of Sensitive Information in SICK FTMg AIR FLOW SENSOR with Partnumbers 1100214, 1100215, 1100216, 1120114, 1120116, 1122524, 112252… Ftmg Esd20axx Firmware 2.0+ Fix from $1,9502023-05-15 HIGH 7.5 CVE-2023-31409 Uncontrolled Resource Consumption in SICK FTMg AIR FLOW SENSOR with Partnumbers 1100214, 1100215, 1100216, 1120114, 1120116, 1122524, 1122526 allows … Ftmg Esd20axx Firmware 2.0+ Fix from $1,9502023-05-15 MEDIUM 5.3 CVE-2023-23448 Inclusion of Sensitive Information in Source Code in SICK FTMg AIR FLOW SENSOR with Partnumbers 1100214, 1100215, 1100216, 1120114, 1120116, 1122524,… Ftmg Esd20axx Firmware 2.0+ Fix from $1,6002023-05-15 MEDIUM 5.3 CVE-2023-23449 Observable Response Discrepancy in SICK FTMg AIR FLOW SENSOR with Partnumbers 1100214, 1100215, 1100216, 1120114, 1120116, 1122524, 1122526 allows a … Ftmg Esd20axx Firmware 2.0+ Fix from $1,6002023-05-15 HIGH 8.2 CVE-2023-23444 Missing Authentication for Critical Function in SICK Flexi Classic and Flexi Soft Gateways with Partnumbers 1042193, 1042964, 1044078, 1044072, 10440… Ue410 En4 Firmware Mitigation only Fix from $1,9502023-05-12 CRITICAL 9.8 CVE-2023-23451 The Flexi Classic and Flexi Soft Gateways SICK UE410-EN3 FLEXI ETHERNET GATEW. with serial number <=2311xxxx all Firmware versions, SICK UE410-EN1 FL… Ue410 En3 Firmware after 2.12.0 Fix from $2,3002023-04-19 CRITICAL 9.8 CVE-2023-23452 Missing Authentication for Critical Function in SICK FX0-GPNT v3 Firmware Version V3.04 and V3.05 allows an unprivileged remote attacker to achieve a… Fx0 Gpnt00000 Firmware Mitigation only Fix from $2,3002023-02-20 CRITICAL 9.8 CVE-2023-23453 Missing Authentication for Critical Function in SICK FX0-GENT v3 Firmware Version V3.04 and V3.05 allows an unprivileged remote attacker to achieve a… Fx0 Gent00010 Firmware Mitigation only Fix from $2,3002023-02-20 CRITICAL 9.8 CVE-2022-47377 Password recovery vulnerability in SICK SIM2000ST Partnumber 2086502 with firmware version <1.13.4 allows an unprivileged remote attacker to gain acc… Sim2000 Firmware 1.13.4+ Fix from $2,3002022-12-16