CVEvulnerability
CVE-2023-3273
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2023-07-10
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 7.5 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
- CVSS 3.1 ([email protected])
- 7.5 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
- Weaknesses
- CWE-284
Description
Improper Access Control in the SICK ICR890-4 could allow an unauthenticated remote attacker to affect the availability of the device by changing settings of the device such as the IP
address based on missing access control.
Affected configurations
• sick icr890-4 firmware (< 2.5.0)
Related
Weakness · CWE (1)
- CWE-284 Improper Access Control weakness
References
- https://sick.com/.well-known/csaf/white/2023/sca-2023-0006.json Vendor Advisory
- https://sick.com/.well-known/csaf/white/2023/sca-2023-0006.pdf Vendor Advisory
- https://sick.com/psirt Product
- https://sick.com/.well-known/csaf/white/2023/sca-2023-0006.json Vendor Advisory
- https://sick.com/.well-known/csaf/white/2023/sca-2023-0006.pdf Vendor Advisory
- https://sick.com/psirt Product