Sensitive Information Exposure in SICK ICR890-4 Device
CVE-2023-3270

8.6HIGH

Key Information:

Vendor

Sick Ag

Status
Vendor
CVE Published:
10 July 2023

What is CVE-2023-3270?

The SICK ICR890-4 device is susceptible to a vulnerability that allows an unauthenticated remote attacker to gain access to sensitive system information. This could lead to potential breaches in system confidentiality and integrity, as attackers may exploit this weakness to retrieve critical data without proper authorization. Organizations utilizing this device should take immediate precautions to mitigate risks associated with unauthorized data access.

Affected Version(s)

ICR890-4 0

References

CVSS V3.1

Score:
8.6
Severity:
HIGH
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.