CVE-2026-2330criticalCWE-552

CVE-2026-2330: falha crítica em SICK Lector83x

CVE-2026-2330

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar SICK Lector83x+ Monitorar SICK Lector85x

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

28Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 9.4epss 0.7%
An attacker may access restricted filesystem areas on the device via the CROWN REST interface due to incomplete whitelist enforcement. Certain directories intended for internal testing were not covered by the whitelist and are accessible without authentication. An unauthenticated attacker could place a manipulated parameter file that becomes active after a reboot, allowing modification of critical device settings, including network configuration and application parameters.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:H
Produtos afetados
SICK AG · SICK Lector83xSICK AG · SICK Lector85x
CVEs relacionadas — SICK Lector83x

No mesmo produto, das mais perigosas para as menos.

CVE-2026-2331CRITICALCVE-2026-2331EPSS 1.0%