Sick
123 CVEs across 291 Sick products. Browse Sick vulnerabilities, severities, and proof-of-concept exploits.
Sick products with known CVEs
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-1627 | Medium | 6.5 | 2026-02-27 | An attacker may exploit the use of outdated and weak MAC algorithms in the device’s SSH service to potentially compromise the integrity of the SSH session, all… |
CVE-2026-1626 | Medium | 6.5 | 2026-02-27 | An attacker may exploit the use of weak CBC-based cipher suites in the device’s SSH service to potentially observe or manipulate parts of the encrypted SSH com… |
CVE-2026-22646 | Medium | 4.3 | 2026-01-15 | Certain error messages returned by the application expose internal system details that should not be visible to end users, providing attackers with valuable re… |
CVE-2026-22645 | Medium | 5.3 | 2026-01-15 | The application discloses all used components, versions and license information to unauthenticated actors, giving attackers the opportunity to target known sec… |
CVE-2026-22644 | Medium | 5.3 | 2026-01-15 | Certain requests pass the authentication token in the URL as string query parameter, making it vulnerable to theft through server logs, proxy logs and Referer… |
CVE-2026-22919 | Low | 3.8 | 2026-01-15 | An attacker with administrative access may inject malicious content into the login page, potentially enabling cross-site scripting (XSS) attacks, leading to th… |
CVE-2026-22918 | Medium | 4.3 | 2026-01-15 | An attacker may exploit missing protection against clickjacking by tricking users into performing unintended actions through maliciously crafted web pages, lea… |
CVE-2026-22917 | Medium | 4.3 | 2026-01-15 | Improper input handling in a system endpoint may allow attackers to overload resources, causing a denial of service. |
CVE-2026-22916 | Medium | 4.3 | 2026-01-15 | An attacker with low privileges may be able to trigger critical system functions such as reboot or factory reset without proper restrictions, potentially leadi… |
CVE-2026-22915 | Medium | 4.3 | 2026-01-15 | An attacker with low privileges may be able to read files from specific directories on the device, potentially exposing sensitive information. |
CVE-2026-22914 | Medium | 4.3 | 2026-01-15 | An attacker with limited permissions may still be able to write files to specific locations on the device, potentially leading to system manipulation. |
CVE-2026-22913 | Medium | 4.3 | 2026-01-15 | Improper handling of a URL parameter may allow attackers to execute code in a user's browser after login. This can lead to the extraction of sensitive data. |
CVE-2026-22912 | Medium | 4.3 | 2026-01-15 | Improper validation of a login parameter may allow attackers to redirect users to malicious websites after authentication. This can lead to various risk includ… |
CVE-2026-22911 | Medium | 5.3 | 2026-01-15 | Firmware update files may expose password hashes for system accounts, which could allow a remote attacker to recover credentials and gain unauthorized access t… |
CVE-2026-22910 | High | 7.5 | 2026-01-15 | The device is deployed with weak and publicly known default passwords for certain hidden user levels, increasing the risk of unauthorized access. This represen… |
CVE-2026-22909 | High | 7.5 | 2026-01-15 | Certain system functions may be accessed without proper authorization, allowing attackers to start, stop, or delete installed applications, potentially disrupt… |
CVE-2026-22908 | Critical | 9.1 | 2026-01-15 | Uploading unvalidated container images may allow remote attackers to gain full access to the system, potentially compromising its integrity and confidentiality. |
CVE-2026-22907 | Critical | 9.9 | 2026-01-15 | An attacker may gain unauthorized access to the host filesystem, potentially allowing them to read and modify system data. |
CVE-2025-59463 | Medium | 4.3 | 2025-10-27 | An attacker may cause chunk-size mismatches that block file transfers and prevent subsequent transfers. |
CVE-2025-59462 | Medium | 6.5 | 2025-10-27 | An attacker who tampers with the C++ CLI client may crash the UpdateService during file transfers, disrupting updates and availability. |
CVE-2025-59461 | High | 7.6 | 2025-10-27 | A remote unauthenticated attacker may use the unauthenticated C++ API to access or modify sensitive data and disrupt services. |
CVE-2025-59460 | High | 7.5 | 2025-10-27 | The system is deployed in its default state, with configuration settings that do not comply with the latest best practices for restricting access. This increas… |
CVE-2025-59459 | Medium | 5.5 | 2025-10-27 | An attacker that gains SSH access to an unprivileged account may be able to disrupt services (including SSH), causing persistent loss of availability. |
CVE-2025-9914 | Medium | 4.3 | 2025-10-06 | The credentials of the users stored in the system's local database can be used for the log in, making it possible for an attacker to gain unauthorized access… |
CVE-2025-9913 | Medium | 4.5 | 2025-10-06 | JavaScript can be ran inside the address bar via the dashboard "Open in new Tab" Button, making the application vulnerable to session hijacking. |
CVE-2025-58591 | Medium | 6.5 | 2025-10-06 | A remote, unauthorized attacker can brute force folders and files and read them like private keys or configurations, making the application vulnerable for gath… |
CVE-2025-58590 | Medium | 6.5 | 2025-10-06 | It's possible to brute force folders and files, what can be used by an attacker to steal sensitve information. |
CVE-2025-58589 | Low | 2.7 | 2025-10-06 | When an error occurs in the application a full stacktrace is provided to the user. The stacktrace lists class and method names as well as other internal inform… |
CVE-2025-58587 | Medium | 6.5 | 2025-10-06 | The application does not implement sufficient measures to prevent multiple failed authentication attempts within a short time frame, making it possible for an… |
CVE-2025-58586 | Medium | 5.3 | 2025-10-06 | For failed login attempts, the application returns different error messages depending on whether the login failed due to an incorrect password or a non-existin… |
CVE-2025-58585 | Medium | 5.3 | 2025-10-06 | Multiple endpoints with sensitive information do not require authentication, making the application susceptible to information gathering. |
CVE-2025-58584 | Medium | 5.3 | 2025-10-06 | In the HTTP request, the username and password are transferred directly in the URL as parameters. However, URLs can be stored in various systems such as server… |
CVE-2025-58583 | Medium | 5.3 | 2025-10-06 | The application provides access to a login protected H2 database for caching purposes. The username is prefilled. |
CVE-2025-58582 | Medium | 5.3 | 2025-10-06 | If a user tries to login but the provided credentials are incorrect a log is created. The data for this POST requests is not validated and it’s possible to sen… |
CVE-2025-58581 | Medium | 4.3 | 2025-10-06 | When an error occurs in the application a full stacktrace is provided to the user. The stacktrace lists class and method names as well as other internal infor… |
CVE-2025-58580 | Medium | 6.5 | 2025-10-06 | An API endpoint allows arbitrary log entries to be created via POST request. Without sufficient validation of the input data, an attacker can cr… |
CVE-2025-58579 | Medium | 5.3 | 2025-10-06 | Due to a lack of authentication, it is possible for an unauthenticated user to request data from this endpoint, making the application vulnerable for user enum… |
CVE-2025-58578 | Low | 3.8 | 2025-10-06 | A user with the appropriate authorization can create any number of user accounts via an API endpoint using a POST request. There are no quotas, check… |
CVE-2025-49200 | Medium | 6.5 | 2025-06-12 | The created backup files are unencrypted, making the application vulnerable for gathering sensitive information by downloading and decompressing the backup fil… |
CVE-2025-49199 | High | 8.8 | 2025-06-12 | The backup ZIPs are not signed by the application, leading to the possibility that an attacker can download a backup ZIP, modify and re-upload it. This allows… |
CVE-2025-49198 | Low | 3.1 | 2025-06-12 | The Media Server’s authorization tokens have a poor quality of randomness. An attacker may be able to guess the token of an active user by computing plausible… |
CVE-2025-49197 | Medium | 6.5 | 2025-06-12 | The application uses a weak password hash function, allowing an attacker to crack the weak password hash to gain access to an FTP user account. |
CVE-2025-49196 | Medium | 6.5 | 2025-06-12 | A service supports the use of a deprecated and unsafe TLS version. This could be exploited to expose sensitive information, modify data in unexpected ways or s… |
CVE-2025-49195 | Medium | 5.3 | 2025-06-12 | The FTP server’s login mechanism does not restrict authentication attempts, allowing an attacker to brute-force user passwords and potentially compromising the… |
CVE-2025-49194 | High | 7.5 | 2025-06-12 | The server supports authentication methods in which credentials are sent in plaintext over unencrypted channels. If an attacker were to intercept traffic betwe… |
CVE-2025-49193 | Medium | 4.2 | 2025-06-12 | The application fails to implement several security headers. These headers help increase the overall security level of the web application by e.g., preventing… |
CVE-2025-49192 | Medium | 4.3 | 2025-06-12 | The web application is vulnerable to clickjacking attacks. The site can be embedded into another frame, allowing an attacker to trick a user into clicking on s… |
CVE-2025-49191 | Medium | 4.8 | 2025-06-12 | Linked URLs during the creation of iFrame widgets and dashboards are vulnerable to code execution. The URLs get embedded as iFrame widgets, making it possible… |
CVE-2025-49190 | Medium | 4.3 | 2025-06-12 | The application is vulnerable to Server-Side Request Forgery (SSRF). An endpoint can be used to send server internal requests to other ports. |
CVE-2025-49189 | Medium | 5.3 | 2025-06-12 | The HttpOnlyflag of the session cookie \"@@\" is set to false. Since this flag helps preventing access to cookies via client-side scripts, setting the flag to… |
CVE-2025-49188 | Medium | 5.3 | 2025-06-12 | The application sends user credentials as URL parameters instead of POST bodies, making it vulnerable to information gathering. |
CVE-2025-49187 | Medium | 5.3 | 2025-06-12 | For failed login attempts, the application returns different error messages depending on whether the login failed due to an incorrect password or a non-existin… |
CVE-2025-49186 | Medium | 5.3 | 2025-06-12 | The product does not implement sufficient measures to prevent multiple failed authentication attempts within a short time frame, making it susceptible to brute… |
CVE-2025-49185 | Medium | 5.5 | 2025-06-12 | The web application is susceptible to cross-site-scripting attacks. An attacker who can create new dashboard widgets can inject malicious JavaScript code into… |
CVE-2025-49184 | High | 7.5 | 2025-06-12 | A remote unauthorized attacker may gather sensitive information of the application, due to missing authorization of configuration settings of the product. |
CVE-2025-49183 | High | 7.5 | 2025-06-12 | All communication with the REST API is unencrypted (HTTP), allowing an attacker to intercept traffic between an actor and the webserver. This leads to the poss… |
CVE-2025-49182 | High | 7.5 | 2025-06-12 | Files in the source code contain login credentials for the admin user and the property configuration password, allowing an attacker to get full access to the a… |
CVE-2025-49181 | High | 8.6 | 2025-06-12 | Due to missing authorization of an API endpoint, unauthorized users can send HTTP GET requests to gather sensitive information. An attacker could also send HTT… |
CVE-2023-5246 | High | 8.8 | 2023-10-23 | Authentication Bypass by Capture-replay in SICK Flexi Soft Gateways with Partnumbers 1044073, 1127717, 1130282, 1044074, 1121597, 1099832, 1051432, 1127487, 10… |
CVE-2023-5103 | Medium | 4.3 | 2023-10-09 | Improper Restriction of Rendered UI Layers or Frames in RDT400 in SICK APU allows an unprivileged remote attacker to potentially reveal sensitive information v… |
CVE-2023-5102 | Medium | 5.3 | 2023-10-09 | Insufficient Control Flow Management in RDT400 in SICK APU allows an unprivileged remote attacker to potentially enable hidden functionality via HTTP requests… |
CVE-2023-5101 | Medium | 5.3 | 2023-10-09 | Files or Directories Accessible to External Parties in RDT400 in SICK APU allows an unprivileged remote attacker to download various files from the server via… |
CVE-2023-5100 | Medium | 5.9 | 2023-10-09 | Cleartext Transmission of Sensitive Information in RDT400 in SICK APU allows an unprivileged remote attacker to retrieve potentially sensitive information via… |
CVE-2023-43698 | High | 7.1 | 2023-10-09 | Improper Neutralization of Input During Web Page Generation (’Cross-site Scripting’) in RDT400 in SICK APU allows an unprivileged remote attacker to run arbit… |
CVE-2023-43697 | Medium | 6.5 | 2023-10-09 | Modification of Assumed-Immutable Data (MAID) in RDT400 in SICK APU allows an unprivileged remote attacker to make the site unable to load necessary strings v… |
CVE-2023-43700 | High | 7.7 | 2023-10-09 | Missing Authorization in RDT400 in SICK APU allows an unprivileged remote attacker to modify data via HTTP requests that no not require authentication. |
CVE-2023-43699 | High | 7.5 | 2023-10-09 | Improper Restriction of Excessive Authentication Attempts in RDT400 in SICK APU allows an unprivileged remote attacker to guess the password via trial-and-err… |
CVE-2023-43696 | High | 8.2 | 2023-10-09 | Improper Access Control in SICK APU allows an unprivileged remote attacker to download as well as upload arbitrary files via anonymous access to the FTP serve… |
CVE-2023-5288 | Critical | 9.8 | 2023-09-29 | A remote unauthorized attacker may connect to the SIM1012, interact with the device and change configuration settings. The adversary may also reset the SIM an… |
CVE-2023-4420 | Critical | 9.8 | 2023-08-24 | A remote unprivileged attacker can intercept the communication via e.g. Man-In-The-Middle, due to the absence of Transport Layer Security (TLS) in the SICK LMS… |
CVE-2023-4419 | Critical | 9.8 | 2023-08-24 | The LMS5xx uses hard-coded credentials, which potentially allow low-skilled unauthorized remote attackers to reconfigure settings and /or disrupt the functiona… |
CVE-2023-4418 | High | 7.5 | 2023-08-24 | A remote unprivileged attacker can sent multiple packages to the LMS5xx to disrupt its availability through a TCP SYN-based denial-of-service (DDoS) attack. B… |
CVE-2023-31412 | High | 7.5 | 2023-08-24 | The LMS5xx uses weak hash generation methods, resulting in the creation of insecure hashs. If an attacker manages to retrieve the hash, it could lead to collis… |
CVE-2023-3273 | High | 7.5 | 2023-07-10 | Improper Access Control in the SICK ICR890-4 could allow an unauthenticated remote attacker to affect the availability of the device by changing settings of th… |
CVE-2023-3272 | High | 7.5 | 2023-07-10 | Cleartext Transmission of Sensitive Information in the SICK ICR890-4 could allow a remote attacker to gather sensitive information by intercepting network traf… |
CVE-2023-3271 | High | 8.2 | 2023-07-10 | Improper Access Control in the SICK ICR890-4 could allow an unauthenticated remote attacker to gather information about the system and download data via the RE… |
CVE-2023-3270 | High | 8.6 | 2023-07-10 | Exposure of Sensitive Information to an Unauthorized Actor in the SICK ICR890-4 could allow an unauthenticated remote attacker to retrieve sensitive informatio… |
CVE-2023-35699 | Medium | 5.3 | 2023-07-10 | Cleartext Storage on Disk in the SICK ICR890-4 could allow an unauthenticated attacker with local access to the device to disclose sensitive information by acc… |
CVE-2023-35698 | Medium | 5.3 | 2023-07-10 | Observable Response Discrepancy in the SICK ICR890-4 could allow a remote attacker to identify valid usernames for the FTP server from the response given durin… |
CVE-2023-35697 | Medium | 5.3 | 2023-07-10 | Improper Restriction of Excessive Authentication Attempts in the SICK ICR890-4 could allow a remote attacker to brute-force user credentials. |
CVE-2023-35696 | High | 7.5 | 2023-07-10 | Unauthenticated endpoints in the SICK ICR890-4 could allow an unauthenticated remote attacker to retrieve sensitive information about the device via HTTP reque… |
CVE-2023-31411 | Critical | 9.8 | 2023-06-19 | A remote unprivileged attacker can modify and access configuration settings on the EventCam App due to the absence of API authentication. The lack of authentic… |
CVE-2023-31410 | Critical | 9.8 | 2023-06-19 | A remote unprivileged attacker can intercept the communication via e.g. Man-In-The-Middle, due to the absence of Transport Layer Security (TLS) in the SICK Eve… |
CVE-2023-31409 | Medium | 5.3 | 2023-05-15 | Uncontrolled Resource Consumption in SICK FTMg AIR FLOW SENSOR with Partnumbers 1100214, 1100215, 1100216, 1120114, 1120116, 1122524, 1122526 allows an remote… |
CVE-2023-31408 | Medium | 5.3 | 2023-05-15 | Cleartext Storage of Sensitive Information in SICK FTMg AIR FLOW SENSOR with Partnumbers 1100214, 1100215, 1100216, 1120114, 1120116, 1122524, 1122526 allows a… |
CVE-2023-23450 | Medium | 6.2 | 2023-05-15 | Use of Password Hash Instead of Password for Authentication in SICK FTMg AIR FLOW SENSOR with Partnumbers 1100214, 1100215, 1100216, 1120114, 1120116, 1122524… |
CVE-2023-23449 | Medium | 5.3 | 2023-05-15 | Observable Response Discrepancy in SICK FTMg AIR FLOW SENSOR with Partnumbers 1100214, 1100215, 1100216, 1120114, 1120116, 1122524, 1122526 allows a remote att… |
CVE-2023-23448 | Medium | 5.3 | 2023-05-15 | Inclusion of Sensitive Information in Source Code in SICK FTMg AIR FLOW SENSOR with Partnumbers 1100214, 1100215, 1100216, 1120114, 1120116, 1122524, 1122526 a… |
CVE-2023-23447 | High | 7.5 | 2023-05-15 | Uncontrolled Resource Consumption in SICK FTMg AIR FLOW SENSOR with Partnumbers 1100214, 1100215, 1100216, 1120114, 1120116, 1122524, 1122526 allows an unprivi… |
CVE-2023-23446 | High | 7.5 | 2023-05-15 | Improper Access Control in SICK FTMg AIR FLOW SENSOR with Partnumbers 1100214, 1100215, 1100216, 1120114, 1120116, 1122524, 1122526 allows an unprivileged remo… |
CVE-2023-23445 | High | 7.5 | 2023-05-15 | Improper Access Control in SICK FTMg AIR FLOW SENSOR with Partnumbers 1100214, 1100215, 1100216, 1120114, 1120116, 1122524, 1122526 allows an unprivileged remo… |
CVE-2023-23444 | High | 7.5 | 2023-05-12 | Missing Authentication for Critical Function in SICK Flexi Classic and Flexi Soft Gateways with Partnumbers 1042193, 1042964, 1044078, 1044072, 1044073, 104407… |
CVE-2023-23451 | Critical | 9.8 | 2023-04-19 | The Flexi Classic and Flexi Soft Gateways SICK UE410-EN3 FLEXI ETHERNET GATEW. with serial number <=2311xxxx all Firmware versions, SICK UE410-EN1 FLEXI ETHERN… |
CVE-2023-23453 | Critical | 9.8 | 2023-02-20 | Missing Authentication for Critical Function in SICK FX0-GENT v3 Firmware Version V3.04 and V3.05 allows an unprivileged remote attacker to achieve arbitrary r… |
CVE-2023-23452 | Critical | 9.8 | 2023-02-20 | Missing Authentication for Critical Function in SICK FX0-GPNT v3 Firmware Version V3.04 and V3.05 allows an unprivileged remote attacker to achieve arbitrary r… |
CVE-2022-47377 | Critical | 9.8 | 2022-12-16 | Password recovery vulnerability in SICK SIM2000ST Partnumber 2086502 with firmware version <1.13.4 allows an unprivileged remote attacker to gain access to the… |
CVE-2022-46834 | Medium | 6.5 | 2022-12-13 | Use of a Broken or Risky Cryptographic Algorithm in SICK RFU65x firmware version < v2.21 allows a low-privileged remote attacker to decrypt the encrypted data… |
CVE-2022-46833 | Medium | 6.5 | 2022-12-13 | Use of a Broken or Risky Cryptographic Algorithm in SICK RFU63x firmware version < v2.21 allows a low-privileged remote attacker to decrypt the encrypted data… |
CVE-2022-46832 | Medium | 6.5 | 2022-12-13 | Use of a Broken or Risky Cryptographic Algorithm in SICK RFU62x firmware version < 2.21 allows a low-privileged remote attacker to decrypt the encrypted data i… |
CVE-2022-27581 | Medium | 6.5 | 2022-12-13 | Use of a Broken or Risky Cryptographic Algorithm in SICK RFU61x firmware version <v2.25 allows a low-privileged remote attacker to decrypt the encrypted data i… |