Improper Access Control in the SICK ICR890-4 could allow an unauthenticated remote attacker to gather information about the system and downl

Affected versions

NVD version ranges (for catalog products). Add the product to your stack with a version and matching uses these.

• sick icr890-4 firmwarebefore 2.5.0

Versions reported by the vendor

Affected version ranges reported by the assigning authority (SICK AG). Independent of NVD's CPE analysis and usually ahead of it.

• SICK AG ICR890-4

  • before 2.5.0affected · *

Other highest-scoring records for the same primary product.

• CVE-2023-3273Improper Access Control in the SICK ICR890-4 could allow an unauthenticated remote attacker to affect the availability of the device by chan
  30Monitor
• CVE-2023-3272Cleartext Transmission of Sensitive Information in the SICK ICR890-4 could allow a remote attacker to gather sensitive information by interc
  30Monitor
• CVE-2023-3270Exposure of Sensitive Information to an Unauthorized Actor in the SICK ICR890-4 could allow an unauthenticated remote attacker to retrieve s
  30Monitor
• CVE-2023-35697Improper Restriction of Excessive Authentication Attempts in the SICK ICR890-4 could allow a remote attacker to brute-force user credentials
  30Monitor
• CVE-2023-35696Unauthenticated endpoints in the SICK ICR890-4 could allow an unauthenticated remote attacker to retrieve sensitive information about the de
  30Monitor
• CVE-2023-35698Observable Response Discrepancy in the SICK ICR890-4 could allow a remote attacker to identify valid usernames for the FTP server from the r
  21Monitor

FIRST EPSS daily score; only changes of 0.01 or more are recorded (step chart).

Attack context

MITRE CAPEC attack patterns and ATT&CK techniques for this weakness class (CWE). A starting point for detection rules and threat hunting.