Sick Tdc-x401gl_firmware
13 CVEs affecting Sick Tdc-x401gl_firmware. Latest disclosed: 2026-01-15. Critical: 2, High: 2.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-22907 | Critical | 9.9 | 2026-01-15 | An attacker may gain unauthorized access to the host filesystem, potentially allowing them to read and modify system data. |
CVE-2026-22908 | Critical | 9.1 | 2026-01-15 | Uploading unvalidated container images may allow remote attackers to gain full access to the system, potentially compromising its integrity and confidentiality. |
CVE-2026-22910 | High | 7.5 | 2026-01-15 | The device is deployed with weak and publicly known default passwords for certain hidden user levels, increasing the risk of unauthorized access. This represen… |
CVE-2026-22909 | High | 7.5 | 2026-01-15 | Certain system functions may be accessed without proper authorization, allowing attackers to start, stop, or delete installed applications, potentially disrupt… |
CVE-2026-22911 | Medium | 5.3 | 2026-01-15 | Firmware update files may expose password hashes for system accounts, which could allow a remote attacker to recover credentials and gain unauthorized access t… |
CVE-2026-22918 | Medium | 4.3 | 2026-01-15 | An attacker may exploit missing protection against clickjacking by tricking users into performing unintended actions through maliciously crafted web pages, lea… |
CVE-2026-22917 | Medium | 4.3 | 2026-01-15 | Improper input handling in a system endpoint may allow attackers to overload resources, causing a denial of service. |
CVE-2026-22916 | Medium | 4.3 | 2026-01-15 | An attacker with low privileges may be able to trigger critical system functions such as reboot or factory reset without proper restrictions, potentially leadi… |
CVE-2026-22915 | Medium | 4.3 | 2026-01-15 | An attacker with low privileges may be able to read files from specific directories on the device, potentially exposing sensitive information. |
CVE-2026-22914 | Medium | 4.3 | 2026-01-15 | An attacker with limited permissions may still be able to write files to specific locations on the device, potentially leading to system manipulation. |
CVE-2026-22913 | Medium | 4.3 | 2026-01-15 | Improper handling of a URL parameter may allow attackers to execute code in a user's browser after login. This can lead to the extraction of sensitive data. |
CVE-2026-22912 | Medium | 4.3 | 2026-01-15 | Improper validation of a login parameter may allow attackers to redirect users to malicious websites after authentication. This can lead to various risk includ… |
CVE-2026-22919 | Low | 3.8 | 2026-01-15 | An attacker with administrative access may inject malicious content into the login page, potentially enabling cross-site scripting (XSS) attacks, leading to th… |