Attackers can read default passwords stored in plain text within SICK products' code

CVE-2024-10025

Summary

A critical vulnerability exists in SICK products due to insecure handling of .sdd files, which contain default passwords stored in plain text. If these credentials are not changed by users, an attacker can easily gain unauthorized access to the affected systems as an 'Authorized Client'. This issue emphasizes the importance of changing default passwords to enhance cybersecurity posture and protect sensitive industrial operations.

References