SICK kayıtları
sick üreticisine ait 130 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 3
- Düzeltme kaydı olan
- %8,5
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-306 Missing Authentication for Critical Function15
- CWE-284 Improper Access Control7
- CWE-327 Use of a Broken or Risky Cryptographic Algorithm7
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')5
- CWE-200 Exposure of Sensitive Information to an Unauthorized Actor5
- CWE-319 Cleartext Transmission of Sensitive Information5
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
130 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
40Planlayın | CVE-2019-10979İstismar yok | SICK MSC800 all versions prior to Version 4.0, the affected firmware versions contain a hard-coded customer account password.sick · msc800 firmware · CWE-798 | Kritik9,8 | — | %3,4 | 1 Tem 2019 |
39İzleyin | CVE-2022-27582İstismar yok | Password recovery vulnerability in SICK SIM4000 (PPC) Partnumber 1078787 allows an unprivileged remote attacker to gain access to the userlesick · sim2000 firmware · CWE-306 | Kritik9,8 | — | %1,3 | 1 Kas 2022 |
39İzleyin | CVE-2022-27584İstismar yok | Password recovery vulnerability in SICK SIM2000ST Partnumber 1080579 allows an unprivileged remote attacker to gain access to the userlevel sick · sim2000st firmware · CWE-306 | Kritik9,8 | — | %1,3 | 1 Kas 2022 |
39İzleyin | CVE-2022-27585İstismar yok | Password recovery vulnerability in SICK SIM1000 FX Partnumber 1097816 and 1097817 with firmware version <1.6.0 allows an unprivileged remotesick · sim1000 fx firmware · CWE-306 | Kritik9,8 | — | %1,3 | 1 Kas 2022 |
39İzleyin | CVE-2022-27586İstismar yok | Password recovery vulnerability in SICK SIM1004 Partnumber 1098148 with firmware version <2.0.0 allows an unprivileged remote attacker to gasick · sim1004-0p0g311 firmware · CWE-306 | Kritik9,8 | — | %1,3 | 1 Kas 2022 |
39İzleyin | CVE-2020-2076İstismar yok | SICK Package Analytics software up to and including version V04.0.0 are vulnerable to an authentication bypass by directly interfacing with sick · package analytics · CWE-306 | Kritik9,8 | — | %1,3 | 29 Tem 2020 |
39İzleyin | CVE-2023-23452İstismar yok | Missing Authentication for Critical Function in SICK FX0-GPNT v3 Firmware Version V3.04 and V3.05 allows an unprivileged remote attacker to sick · fx0-gpnt00000 firmware · CWE-306 | Kritik9,8 | — | %1,1 | 20 Şub 2023 |
39İzleyin | CVE-2023-23453İstismar yok | Missing Authentication for Critical Function in SICK FX0-GENT v3 Firmware Version V3.04 and V3.05 allows an unprivileged remote attacker to sick · fx0-gent00010 firmware · CWE-306 | Kritik9,8 | — | %1,1 | 20 Şub 2023 |
39İzleyin | CVE-2023-31411İstismar yok | A remote unprivileged attacker can modify and access configuration settings on the EventCam App due to the absence of API authentication.sick · sick eventcam app · CWE-306 | Kritik9,8 | — | %0,9 | 19 Haz 2023 |
39İzleyin | CVE-2022-47377İstismar yok | Password recovery vulnerability in SICK SIM2000ST Partnumber 2086502 with firmware version <1.13.4 allows an unprivileged remote attacker tosick · sim2000 firmware · CWE-306 | Kritik9,8 | — | %0,9 | 16 Ara 2022 |
39İzleyin | CVE-2023-23450İstismar yok | Use of Password Hash Instead of Password for Authentication in SICK FTMg AIR FLOW SENSOR with Partnumbers 1100214, 1100215, 1100216, 1120114sick · ftmg-esd20axx firmware · CWE-836 | Kritik9,8 | — | %0,7 | 15 May 2023 |
39İzleyin | CVE-2023-5288İstismar yok | A remote unauthorized attacker may connect to the SIM1012, interact with the device and change configuration settings.sick · sim1012-0p0g200 firmware · CWE-284 | Kritik9,8 | — | %0,6 | 29 Eyl 2023 |
39İzleyin | CVE-2023-43696İstismar yok | Improper Access Control in SICK APU allows an unprivileged remote attacker to download as well as upload arbitrary files via anonymous accesick · apu0200 firmware · CWE-284 | Kritik9,8 | — | %0,6 | 9 Eki 2023 |
39İzleyin | CVE-2023-23451İstismar yok | The Flexi Classic and Flexi Soft Gateways SICK UE410-EN3 FLEXI ETHERNET GATEW.sick · ue410-en3 firmware · CWE-477 | Kritik9,8 | — | %0,6 | 19 Nis 2023 |
39İzleyin | CVE-2025-49182İstismar yok | Credential disclosuresick · media server · CWE-540 | Kritik9,8 | — | %0,6 | 12 Haz 2025 |
39İzleyin | CVE-2025-49195İstismar yok | No protection against brute-force attackssick · media server · CWE-307 | Kritik9,8 | — | %0,5 | 12 Haz 2025 |
39İzleyin | CVE-2025-58587İstismar yok | Improper Restriction of Excessive Authentication Attemptssick · baggage analytics · CWE-307 | Kritik9,8 | — | %0,5 | 6 Eki 2025 |
39İzleyin | CVE-2025-59461İstismar yok | API does not require authenticationsick · tloc100-100 firmware · CWE-862 | Kritik9,8 | — | %0,5 | 27 Eki 2025 |
39İzleyin | CVE-2025-49199İstismar yok | Backup files can be modified and uploadedsick · field analytics · CWE-345 | Kritik9,8 | — | %0,3 | 12 Haz 2025 |
36İzleyin | CVE-2022-27577İstismar yok | The vulnerability in the MSC800 in all versions before 4.15 allows for an attacker to predict the TCP initial sequence number.sick · msc800 firmware · CWE-342 | Kritik9,1 | — | %1,4 | 11 Nis 2022 |
36İzleyin | CVE-2024-10025İstismar yok | Vulnerability in SICK CLV6xx, SICK Lector6xx and SICK RFx6xxsick ag · sick clv6xx · CWE-798 | Kritik9,1 | — | %0,8 | 17 Eki 2024 |
36İzleyin | CVE-2022-27583İstismar yok | A remote unprivileged attacker can interact with the configuration interface of a Flexi-Compact FLX3-CPUC1 or FLX3-CPUC2 running an affectedsick · flx3-cpuc1 firmware · CWE-285 | Kritik9,1 | — | %0,6 | 31 Eki 2022 |
36İzleyin | CVE-2026-22908İstismar yok | Uploading unvalidated container images may allow remote attackers to gain full access to the system, potentially compromising its integrity sick · tdc-x401gl firmware · CWE-266 | Kritik9,1 | — | %0,6 | 15 Oca 2026 |
36İzleyin | CVE-2024-10773İstismar yok | SICK InspectorP61x, SICK InspectorP62x and SICK TiM3xx are vulnerable for pass-the-hash attackssick ag · sick inspectorp61x · CWE-912 | Kritik9,0 | — | %0,6 | 6 Ara 2024 |
36İzleyin | CVE-2026-22909İstismar yok | Certain system functions may be accessed without proper authorization, allowing attackers to start, stop, or delete installed applications, sick · tdc-x401gl firmware · CWE-284 | Kritik9,1 | — | %0,6 | 15 Oca 2026 |
- CVE-2019-1097940Planlayın
SICK MSC800 all versions prior to Version 4.0, the affected firmware versions contain a hard-coded customer account password.
KritikCVSS 9,8İstismar yokEPSS %3sick · msc800 firmware1 Tem 2019
- CVE-2022-2758239İzleyin
Password recovery vulnerability in SICK SIM4000 (PPC) Partnumber 1078787 allows an unprivileged remote attacker to gain access to the userle
KritikCVSS 9,8İstismar yokEPSS %1sick · sim2000 firmware1 Kas 2022
- CVE-2022-2758439İzleyin
Password recovery vulnerability in SICK SIM2000ST Partnumber 1080579 allows an unprivileged remote attacker to gain access to the userlevel
KritikCVSS 9,8İstismar yokEPSS %1sick · sim2000st firmware1 Kas 2022
- CVE-2022-2758539İzleyin
Password recovery vulnerability in SICK SIM1000 FX Partnumber 1097816 and 1097817 with firmware version <1.6.0 allows an unprivileged remote
KritikCVSS 9,8İstismar yokEPSS %1sick · sim1000 fx firmware1 Kas 2022
- CVE-2022-2758639İzleyin
Password recovery vulnerability in SICK SIM1004 Partnumber 1098148 with firmware version <2.0.0 allows an unprivileged remote attacker to ga
KritikCVSS 9,8İstismar yokEPSS %1sick · sim1004-0p0g311 firmware1 Kas 2022
- CVE-2020-207639İzleyin
SICK Package Analytics software up to and including version V04.0.0 are vulnerable to an authentication bypass by directly interfacing with
KritikCVSS 9,8İstismar yokEPSS %1sick · package analytics29 Tem 2020
- CVE-2023-2345239İzleyin
Missing Authentication for Critical Function in SICK FX0-GPNT v3 Firmware Version V3.04 and V3.05 allows an unprivileged remote attacker to
KritikCVSS 9,8İstismar yokEPSS %1sick · fx0-gpnt00000 firmware20 Şub 2023
- CVE-2023-2345339İzleyin
Missing Authentication for Critical Function in SICK FX0-GENT v3 Firmware Version V3.04 and V3.05 allows an unprivileged remote attacker to
KritikCVSS 9,8İstismar yokEPSS %1sick · fx0-gent00010 firmware20 Şub 2023
- CVE-2023-3141139İzleyin
A remote unprivileged attacker can modify and access configuration settings on the EventCam App due to the absence of API authentication.
KritikCVSS 9,8İstismar yokEPSS %1sick · sick eventcam app19 Haz 2023
- CVE-2022-4737739İzleyin
Password recovery vulnerability in SICK SIM2000ST Partnumber 2086502 with firmware version <1.13.4 allows an unprivileged remote attacker to
KritikCVSS 9,8İstismar yokEPSS %1sick · sim2000 firmware16 Ara 2022
- CVE-2023-2345039İzleyin
Use of Password Hash Instead of Password for Authentication in SICK FTMg AIR FLOW SENSOR with Partnumbers 1100214, 1100215, 1100216, 1120114
KritikCVSS 9,8İstismar yokEPSS %1sick · ftmg-esd20axx firmware15 May 2023
- CVE-2023-528839İzleyin
A remote unauthorized attacker may connect to the SIM1012, interact with the device and change configuration settings.
KritikCVSS 9,8İstismar yokEPSS %1sick · sim1012-0p0g200 firmware29 Eyl 2023
- CVE-2023-4369639İzleyin
Improper Access Control in SICK APU allows an unprivileged remote attacker to download as well as upload arbitrary files via anonymous acce
KritikCVSS 9,8İstismar yokEPSS %1sick · apu0200 firmware9 Eki 2023
- CVE-2023-2345139İzleyin
The Flexi Classic and Flexi Soft Gateways SICK UE410-EN3 FLEXI ETHERNET GATEW.
KritikCVSS 9,8İstismar yokEPSS %1sick · ue410-en3 firmware19 Nis 2023
- CVE-2025-4918239İzleyin
Credential disclosure
KritikCVSS 9,8İstismar yokEPSS %1sick · media server12 Haz 2025
- CVE-2025-4919539İzleyin
No protection against brute-force attacks
KritikCVSS 9,8İstismar yokEPSS %1sick · media server12 Haz 2025
- CVE-2025-5858739İzleyin
Improper Restriction of Excessive Authentication Attempts
KritikCVSS 9,8İstismar yokEPSS %0sick · baggage analytics6 Eki 2025
- CVE-2025-5946139İzleyin
API does not require authentication
KritikCVSS 9,8İstismar yokEPSS %0sick · tloc100-100 firmware27 Eki 2025
- CVE-2025-4919939İzleyin
Backup files can be modified and uploaded
KritikCVSS 9,8İstismar yokEPSS %0sick · field analytics12 Haz 2025
- CVE-2022-2757736İzleyin
The vulnerability in the MSC800 in all versions before 4.15 allows for an attacker to predict the TCP initial sequence number.
KritikCVSS 9,1İstismar yokEPSS %1sick · msc800 firmware11 Nis 2022
- CVE-2024-1002536İzleyin
Vulnerability in SICK CLV6xx, SICK Lector6xx and SICK RFx6xx
KritikCVSS 9,1İstismar yokEPSS %1sick ag · sick clv6xx17 Eki 2024
- CVE-2022-2758336İzleyin
A remote unprivileged attacker can interact with the configuration interface of a Flexi-Compact FLX3-CPUC1 or FLX3-CPUC2 running an affected
KritikCVSS 9,1İstismar yokEPSS %1sick · flx3-cpuc1 firmware31 Eki 2022
- CVE-2026-2290836İzleyin
Uploading unvalidated container images may allow remote attackers to gain full access to the system, potentially compromising its integrity
KritikCVSS 9,1İstismar yokEPSS %1sick · tdc-x401gl firmware15 Oca 2026
- CVE-2024-1077336İzleyin
SICK InspectorP61x, SICK InspectorP62x and SICK TiM3xx are vulnerable for pass-the-hash attacks
KritikCVSS 9,0İstismar yokEPSS %1sick ag · sick inspectorp61x6 Ara 2024
- CVE-2026-2290936İzleyin
Certain system functions may be accessed without proper authorization, allowing attackers to start, stop, or delete installed applications,
KritikCVSS 9,1İstismar yokEPSS %1sick · tdc-x401gl firmware15 Oca 2026