Remote Communication Interception Vulnerability in SICK EventCam App

CVE-2023-31410

What is CVE-2023-31410?

The SICK EventCam App is susceptible to a vulnerability where a remote unprivileged attacker can intercept communications, including sensitive information. This issue arises from the absence of Transport Layer Security (TLS), which creates an unsecured communication channel. Attackers can leverage this weakness to eavesdrop and potentially alter data transmitted between the EventCam App and the Client. As a result, unauthorized users may gain access to confidential information without detection.

References