Description
The device’s passwords have not been adequately salted, making them vulnerable to password extraction attacks.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
SICK AG SICK FLX3-CPUC200
Default version status: affected
all versionsaffected
SICK AG TDC-X401GL
Default version status: affected
all versionsaffected
References
- https://sick.com/psirt ↗
- https://cdn.sick.com/media/docs/1/11/411/Special_information_CYBERSECURITY_BY_SICK_en_IM0084411.PDF ↗
- https://www.cisa.gov/resources-tools/resources/ics-recommended-practices ↗
- https://www.first.org/cvss/calculator/3.1 ↗
- https://www.sick.com/.well-known/csaf/white/2025/sca-2025-0005.pdf ↗
- https://www.sick.com/.well-known/csaf/white/2025/sca-2025-0005.json ↗