Description
A remote unauthenticated attacker may be able to change the IP adress of the device, and therefore affecting the availability of the device.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
SICK AG SICK FLX0-GPNT100
Default version status: affected
all versionsaffected
SICK AG SICK FLX3-CPUC200
Default version status: affected
all versionsaffected
References
- https://sick.com/psirt ↗
- https://cdn.sick.com/media/docs/1/11/411/Special_information_CYBERSECURITY_BY_SICK_en_IM0084411.PDF ↗
- https://www.cisa.gov/resources-tools/resources/ics-recommended-practices ↗
- https://www.first.org/cvss/calculator/3.1 ↗
- https://www.sick.com/.well-known/csaf/white/2025/sca-2025-0005.pdf ↗
- https://www.sick.com/.well-known/csaf/white/2025/sca-2025-0005.json ↗