Skip to content
Noroxi

SICK records

130 published records for vendor sick.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
3
With a fix record
8.5%
Median publish → KEV
No record has entered KEV

Records by year

  1. 19
  2. 20
  3. 21
  4. 22
  5. 23
  6. 24
  7. 25
  8. 26

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

130 records
  • CVE-2019-10979
    40Plan

    SICK MSC800 all versions prior to Version 4.0, the affected firmware versions contain a hard-coded customer account password.

    CriticalCVSS 9.8No exploitEPSS 3%

    sick · msc800 firmwareJul 1, 2019

  • CVE-2022-27582
    39Monitor

    Password recovery vulnerability in SICK SIM4000 (PPC) Partnumber 1078787 allows an unprivileged remote attacker to gain access to the userle

    CriticalCVSS 9.8No exploitEPSS 1%

    sick · sim2000 firmwareNov 1, 2022

  • CVE-2022-27584
    39Monitor

    Password recovery vulnerability in SICK SIM2000ST Partnumber 1080579 allows an unprivileged remote attacker to gain access to the userlevel

    CriticalCVSS 9.8No exploitEPSS 1%

    sick · sim2000st firmwareNov 1, 2022

  • CVE-2022-27585
    39Monitor

    Password recovery vulnerability in SICK SIM1000 FX Partnumber 1097816 and 1097817 with firmware version <1.6.0 allows an unprivileged remote

    CriticalCVSS 9.8No exploitEPSS 1%

    sick · sim1000 fx firmwareNov 1, 2022

  • CVE-2022-27586
    39Monitor

    Password recovery vulnerability in SICK SIM1004 Partnumber 1098148 with firmware version <2.0.0 allows an unprivileged remote attacker to ga

    CriticalCVSS 9.8No exploitEPSS 1%

    sick · sim1004-0p0g311 firmwareNov 1, 2022

  • CVE-2020-2076
    39Monitor

    SICK Package Analytics software up to and including version V04.0.0 are vulnerable to an authentication bypass by directly interfacing with

    CriticalCVSS 9.8No exploitEPSS 1%

    sick · package analyticsJul 29, 2020

  • CVE-2023-23452
    39Monitor

    Missing Authentication for Critical Function in SICK FX0-GPNT v3 Firmware Version V3.04 and V3.05 allows an unprivileged remote attacker to

    CriticalCVSS 9.8No exploitEPSS 1%

    sick · fx0-gpnt00000 firmwareFeb 20, 2023

  • CVE-2023-23453
    39Monitor

    Missing Authentication for Critical Function in SICK FX0-GENT v3 Firmware Version V3.04 and V3.05 allows an unprivileged remote attacker to

    CriticalCVSS 9.8No exploitEPSS 1%

    sick · fx0-gent00010 firmwareFeb 20, 2023

  • CVE-2023-31411
    39Monitor

    A remote unprivileged attacker can modify and access configuration settings on the EventCam App due to the absence of API authentication.

    CriticalCVSS 9.8No exploitEPSS 1%

    sick · sick eventcam appJun 19, 2023

  • CVE-2022-47377
    39Monitor

    Password recovery vulnerability in SICK SIM2000ST Partnumber 2086502 with firmware version <1.13.4 allows an unprivileged remote attacker to

    CriticalCVSS 9.8No exploitEPSS 1%

    sick · sim2000 firmwareDec 16, 2022

  • CVE-2023-23450
    39Monitor

    Use of Password Hash Instead of Password for Authentication in SICK FTMg AIR FLOW SENSOR with Partnumbers 1100214, 1100215, 1100216, 1120114

    CriticalCVSS 9.8No exploitEPSS 1%

    sick · ftmg-esd20axx firmwareMay 15, 2023

  • CVE-2023-5288
    39Monitor

    A remote unauthorized attacker may connect to the SIM1012, interact with the device and change configuration settings.

    CriticalCVSS 9.8No exploitEPSS 1%

    sick · sim1012-0p0g200 firmwareSep 29, 2023

  • CVE-2023-43696
    39Monitor

    Improper Access Control in SICK APU allows an unprivileged remote attacker to download as well as upload arbitrary files via anonymous acce

    CriticalCVSS 9.8No exploitEPSS 1%

    sick · apu0200 firmwareOct 9, 2023

  • CVE-2023-23451
    39Monitor

    The Flexi Classic and Flexi Soft Gateways SICK UE410-EN3 FLEXI ETHERNET GATEW.

    CriticalCVSS 9.8No exploitEPSS 1%

    sick · ue410-en3 firmwareApr 19, 2023

  • CVE-2025-49182
    39Monitor

    Credential disclosure

    CriticalCVSS 9.8No exploitEPSS 1%

    sick · media serverJun 12, 2025

  • CVE-2025-49195
    39Monitor

    No protection against brute-force attacks

    CriticalCVSS 9.8No exploitEPSS 1%

    sick · media serverJun 12, 2025

  • CVE-2025-58587
    39Monitor

    Improper Restriction of Excessive Authentication Attempts

    CriticalCVSS 9.8No exploitEPSS 0%

    sick · baggage analyticsOct 6, 2025

  • CVE-2025-59461
    39Monitor

    API does not require authentication

    CriticalCVSS 9.8No exploitEPSS 0%

    sick · tloc100-100 firmwareOct 27, 2025

  • CVE-2025-49199
    39Monitor

    Backup files can be modified and uploaded

    CriticalCVSS 9.8No exploitEPSS 0%

    sick · field analyticsJun 12, 2025

  • CVE-2022-27577
    36Monitor

    The vulnerability in the MSC800 in all versions before 4.15 allows for an attacker to predict the TCP initial sequence number.

    CriticalCVSS 9.1No exploitEPSS 1%

    sick · msc800 firmwareApr 11, 2022

  • CVE-2024-10025
    36Monitor

    Vulnerability in SICK CLV6xx, SICK Lector6xx and SICK RFx6xx

    CriticalCVSS 9.1No exploitEPSS 1%

    sick ag · sick clv6xxOct 17, 2024

  • CVE-2022-27583
    36Monitor

    A remote unprivileged attacker can interact with the configuration interface of a Flexi-Compact FLX3-CPUC1 or FLX3-CPUC2 running an affected

    CriticalCVSS 9.1No exploitEPSS 1%

    sick · flx3-cpuc1 firmwareOct 31, 2022

  • CVE-2026-22908
    36Monitor

    Uploading unvalidated container images may allow remote attackers to gain full access to the system, potentially compromising its integrity

    CriticalCVSS 9.1No exploitEPSS 1%

    sick · tdc-x401gl firmwareJan 15, 2026

  • CVE-2024-10773
    36Monitor

    SICK InspectorP61x, SICK InspectorP62x and SICK TiM3xx are vulnerable for pass-the-hash attacks

    CriticalCVSS 9.0No exploitEPSS 1%

    sick ag · sick inspectorp61xDec 6, 2024

  • CVE-2026-22909
    36Monitor

    Certain system functions may be accessed without proper authorization, allowing attackers to start, stop, or delete installed applications,

    CriticalCVSS 9.1No exploitEPSS 1%

    sick · tdc-x401gl firmwareJan 15, 2026