CVE-2026-22916: fallo de gravedad media en SICK AG TDC-X401GL
Publicada el
Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.
13Vexday Risk Score
Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.
ssvc Trackcvss 4.3epss 0.4%
An attacker with low privileges may be able to trigger critical system functions such as reboot or factory reset without proper restrictions, potentially leading to service disruption or loss of configuration.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L
Productos afectados
SICK AG · TDC-X401GLCVEs relacionadas — SICK AG TDC-X401GL
En el mismo producto, de las más peligrosas a las menos.
CVE-2024-10771HIGHSICK InspectorP61x, SICK InspectorP62x and SICK TiM3xx are vulnerable for remote code executionEPSS 1.1%CVE-2026-22908CRITICALCVE-2026-22908EPSS 0.6%CVE-2026-22909HIGHCVE-2026-22909EPSS 0.6%CVE-2026-22917MEDIUMCVE-2026-22917EPSS 0.6%CVE-2026-22911MEDIUMCVE-2026-22911EPSS 0.5%CVE-2026-22910HIGHCVE-2026-22910EPSS 0.5%
Referencias
https://sick.com/psirthttps://www.cisa.gov/resources-tools/resources/ics-recommended-practiceshttps://www.first.org/cvss/calculator/3.1https://www.sick.com/media/docs/9/19/719/special_information_sick_operating_guidelines_cybersecurity_by_sick_en_im0106719.pdfhttps://www.sick.com/.well-known/csaf/white/2026/sca-2026-0001.jsonhttps://www.sick.com/.well-known/csaf/white/2026/sca-2026-0001.pdf