Description
The application discloses all used components, versions and license information to unauthenticated actors, giving attackers the opportunity to target known security vulnerabilities of used components.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
SICK AG Incoming Goods Suite
Default version status: affected
0 to < 1.2.1affected
References
- https://sick.com/psirt ↗
- https://www.sick.com/media/docs/9/19/719/special_information_sick_operating_guidelines_cybersecurity_by_sick_en_im0106719.pdf ↗
- https://www.cisa.gov/resources-tools/resources/ics-recommended-practices ↗
- https://www.first.org/cvss/calculator/3.1 ↗
- https://www.sick.com/.well-known/csaf/white/2026/sca-2026-0002.json ↗
- https://www.sick.com/.well-known/csaf/white/2026/sca-2026-0002.pdf ↗