Description
A remote unauthorized attacker may gather sensitive information of the application, due to missing authorization of configuration settings of the product.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
SICK AG Field Analytics
Default version status: affected
all versionsaffected
SICK AG Baggage Analytics
Default version status: affected
all versionaffected
SICK AG Tire Analytics
Default version status: affected
all versionaffected
SICK AG Package Analytics
Default version status: affected
all versionsaffected
SICK AG Logistic Diagnostic Analytics
Default version status: affected
all versionsaffected
SICK AG Enterprise Analytics
Default version status: affected
all versionsaffected
References
- https://sick.com/psirt ↗
- https://cdn.sick.com/media/docs/1/11/411/Special_information_CYBERSECURITY_BY_SICK_en_IM0084411.PDF ↗
- https://www.cisa.gov/resources-tools/resources/ics-recommended-practices ↗
- https://www.first.org/cvss/calculator/3.1 ↗
- https://www.sick.com/.well-known/csaf/white/2025/sca-2025-0007.pdf ↗
- https://www.sick.com/.well-known/csaf/white/2025/sca-2025-0007.json ↗