Sick
Page 2 of 2 — Sick CVEs from a corpus of 123, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2022-43990 | High | 7.3 | 2022-11-01 | Password recovery vulnerability in SICK SIM1012 Partnumber 1098146 with firmware version <2.2.0 allows an unprivileged remote attacker to gain access to the us… |
CVE-2022-43989 | High | 7.3 | 2022-11-01 | Password recovery vulnerability in SICK SIM2x00 (ARM) Partnumber 1092673 and 1081902 with firmware version < 1.2.0 allows an unprivileged remote attacker to ga… |
CVE-2022-27586 | Critical | 9.8 | 2022-11-01 | Password recovery vulnerability in SICK SIM1004 Partnumber 1098148 with firmware version <2.0.0 allows an unprivileged remote attacker to gain access to the us… |
CVE-2022-27585 | Critical | 9.8 | 2022-11-01 | Password recovery vulnerability in SICK SIM1000 FX Partnumber 1097816 and 1097817 with firmware version <1.6.0 allows an unprivileged remote attacker to gain a… |
CVE-2022-27584 | Critical | 9.8 | 2022-11-01 | Password recovery vulnerability in SICK SIM2000ST Partnumber 1080579 allows an unprivileged remote attacker to gain access to the userlevel defined as Recovera… |
CVE-2022-27582 | Critical | 9.8 | 2022-11-01 | Password recovery vulnerability in SICK SIM4000 (PPC) Partnumber 1078787 allows an unprivileged remote attacker to gain access to the userlevel defined as Reco… |
CVE-2022-27583 | Critical | 9.1 | 2022-10-31 | A remote unprivileged attacker can interact with the configuration interface of a Flexi-Compact FLX3-CPUC1 or FLX3-CPUC2 running an affected firmware version t… |
CVE-2022-27580 | High | 7.8 | 2022-07-19 | A deserialization vulnerability in a .NET framework class used and not properly checked by Safety Designer all versions up to and including 1.11.0 allows an at… |
CVE-2022-27579 | High | 7.8 | 2022-07-19 | A deserialization vulnerability in a .NET framework class used and not properly checked by Flexi Soft Designer in all versions up to and including 1.9.4 SP1 al… |
CVE-2021-32504 | Medium | 5.3 | 2022-07-19 | Unauthenticated users can access sensitive web URLs through GET request, which should be restricted to maintenance users only. A malicious attacker could use t… |
CVE-2022-27578 | High | 7.8 | 2022-04-11 | An attacker can perform a privilege escalation through the SICK OEE if the application is installed in a directory where non authenticated or low privilege use… |
CVE-2022-27577 | Critical | 9.1 | 2022-04-11 | The vulnerability in the MSC800 in all versions before 4.15 allows for an attacker to predict the TCP initial sequence number. When the TCP sequence is predict… |
CVE-2021-32503 | Medium | 4.9 | 2022-04-01 | Unauthenticated users can access sensitive web URLs through GET request, which should be restricted to maintenance users only. A malicious attacker could use t… |
CVE-2021-32499 | High | 7.5 | 2021-12-17 | SICK SOPAS ET before version 4.8.0 allows attackers to manipulate the command line arguments to pass in any value to the Emulator executable. |
CVE-2021-32498 | High | 8.6 | 2021-12-17 | SICK SOPAS ET before version 4.8.0 allows attackers to manipulate the pathname of the emulator and use path traversal to run an arbitrary executable located on… |
CVE-2021-32497 | High | 8.6 | 2021-12-17 | SICK SOPAS ET before version 4.8.0 allows attackers to wrap any executable file into an SDD and provide this to a SOPAS ET user. When a user starts the emulato… |
CVE-2021-32496 | Medium | 5.3 | 2021-06-28 | SICK Visionary-S CX up version 5.21.2.29154R are vulnerable to an Inadequate Encryption Strength vulnerability concerning the internal SSH interface solely use… |
CVE-2020-2075 | High | 7.5 | 2020-08-31 | Platform mechanism AutoIP allows remote attackers to reboot the device via a crafted packet in SICK AG solutions Bulkscan LMS111, Bulkscan LMS511, CLV62x – CLV… |
CVE-2020-2078 | Medium | 6.5 | 2020-07-29 | Passwords are stored in plain text within the configuration of SICK Package Analytics software up to and including V04.1.1. An authorized attacker could access… |
CVE-2020-2077 | High | 7.5 | 2020-07-29 | SICK Package Analytics software up to and including version V04.0.0 are vulnerable due to incorrect default permissions settings. An unauthorized attacker coul… |
CVE-2020-2076 | Critical | 9.8 | 2020-07-29 | SICK Package Analytics software up to and including version V04.0.0 are vulnerable to an authentication bypass by directly interfacing with the REST API. An at… |
CVE-2019-14753 | High | 7.5 | 2019-09-24 | SICK FX0-GPNT00000 and FX0-GENT00000 devices through 3.4.0 have a Buffer Overflow |
CVE-2019-10979 | Critical | 9.8 | 2019-07-01 | SICK MSC800 all versions prior to Version 4.0, the affected firmware versions contain a hard-coded customer account password. |