CVE-2024-10025criticalCWE-798

CVE-2024-10025: critical vulnerability in SICK CLV6xx

Vulnerability in SICK CLV6xx, SICK Lector6xx and SICK RFx6xx

Published

Follow this CVE+ Monitor SICK CLV6xx+ Monitor SICK Lector6xx

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

28Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 9.1epss 0.8%
A vulnerability in the .sdd file allows an attacker to read default passwords stored in plain text within the code. By exploiting these plaintext credentials, an attacker can log into affected SICK products as an “Authorized Client” if the customer has not changed the default password.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H
Affected products
SICK AG · SICK CLV6xxSICK AG · SICK Lector6xxSICK AG · SICK RFx6xx