Skip to content
CVE PROGRAM SOURCE RECORD8.2 High

CVE-2023-3271

Improper Access Control in the SICK ICR890-4 could allow an unauthenticated remote attacker to gather information about the system and download data via the REST API by accessing

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
SICK AG

Description

Improper Access Control in the SICK ICR890-4 could allow an unauthenticated remote attacker to gather information about the system and download data via the REST API by accessing unauthenticated endpoints.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

SICK AG ICR890-4

Default version status: affected

  • 0 to < 2.5.0affected

References