CveMateVulnerability intelligence

Sick vulnerabilities, page 3

78 vulnerabilities

Known vulnerabilities in Sick products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 152 products.

CVE-2026-22913sick agtdc-x401gl+19mo ago15-01-2026 13:05

Improper handling of a URL parameter may allow attackers to execute code in a user's browser after login. This can lead to the extraction of sensitive data.CVE-2026-22645sick agincoming goods suite+19mo ago15-01-2026 13:14

The application discloses all used components, versions and license information to unauthenticated actors, giving attackers the opportunity to target known security vulnerabilities of used components.CVE-2026-22907sick agtdc-x401gl+19mo ago15-01-2026 12:59

An attacker may gain unauthorized access to the host filesystem, potentially allowing them to read and modify system data.CVE-2026-22908sick agtdc-x401gl+19mo ago15-01-2026 13:00

Uploading unvalidated container images may allow remote attackers to gain full access to the system, potentially compromising its integrity and confidentiality.CVE-2026-22917sick agtdc-x401gl+19mo ago15-01-2026 13:07

Improper input handling in a system endpoint may allow attackers to overload resources, causing a denial of service.CVE-2026-22646sick agincoming goods suite+19mo ago15-01-2026 13:15

Certain error messages returned by the application expose internal system details that should not be visible to end users, providing attackers with valuable reconnaissance information (like file paths, database errors, or software versions) that can be used to map the application's internal structure and discover other, more critical vulnerabilities.CVE-2026-22912sick agtdc-x401gl+19mo ago15-01-2026 13:03

Improper validation of a login parameter may allow attackers to redirect users to malicious websites after authentication. This can lead to various risk including stealing credentials from unsuspecting users.CVE-2023-31409sick agsick ftmg-esd15axx air flow sensor+133y ago15-05-2023 10:55

Uncontrolled Resource Consumption in SICK FTMg AIR FLOW SENSOR with Partnumbers 1100214, 1100215, 1100216, 1120114, 1120116, 1122524, 1122526 allows an remote attacker to influence the availability of the webserver by invocing a Slowloris style attack via HTTP requests.CVE-2023-31408sick agsick ftmg-esd15axx air flow sensor+133y ago15-05-2023 10:55

Cleartext Storage of Sensitive Information in SICK FTMg AIR FLOW SENSOR with Partnumbers 1100214, 1100215, 1100216, 1120114, 1120116, 1122524, 1122526 allows a remote attacker to potentially steal user credentials that are stored in the user’s browsers local storage via cross-site-scripting attacks.CVE-2023-43698sick agapu0200+13y ago09-10-2023 12:01

Improper Neutralization of Input During Web Page Generation (’Cross-site Scripting’) in RDT400 in SICK APU allows an unprivileged remote attacker to run arbitrary code in the clients browser via injecting code into the website.CVE-2023-43700sick agapu0200+13y ago09-10-2023 11:56

Missing Authorization in RDT400 in SICK APU allows an unprivileged remote attacker to modify data via HTTP requests that no not require authentication.CVE-2023-43696sick agapu0200+13y ago09-10-2023 11:51

Improper Access Control in SICK APU allows an unprivileged remote attacker to download as well as upload arbitrary files via anonymous access to the FTP server.CVE-2023-43697sick agapu0200+13y ago09-10-2023 12:03

Modification of Assumed-Immutable Data (MAID) in RDT400 in SICK APU allows an unprivileged remote attacker to make the site unable to load necessary strings via changing file paths using HTTP requests.CVE-2023-43699sick agapu0200+13y ago09-10-2023 11:59

Improper Restriction of Excessive Authentication Attempts in RDT400 in SICK APU allows an unprivileged remote attacker to guess the password via trial-and-error as the login attempts are not limited.CVE-2023-5103sick agapu0200+13y ago09-10-2023 12:11

Improper Restriction of Rendered UI Layers or Frames in RDT400 in SICK APU allows an unprivileged remote attacker to potentially reveal sensitive information via tricking a user into clicking on an actionable item using an iframe.CVE-2023-5288sick agsim1012+13y ago29-09-2023 11:37

A remote unauthorized attacker may connect to the SIM1012, interact with the device and change configuration settings. The adversary may also reset the SIM and in the worst case upload a new firmware version to the device.CVE-2023-5101sick agapu0200+13y ago09-10-2023 12:07

Files or Directories Accessible to External Parties in RDT400 in SICK APU allows an unprivileged remote attacker to download various files from the server via HTTP requests.CVE-2023-5246sick agfx0-gent00000+252y ago23-10-2023 12:22

Authentication Bypass by Capture-replay in SICK Flexi Soft Gateways with Partnumbers 1044073, 1127717, 1130282, 1044074, 1121597, 1099832, 1051432, 1127487, 1069070, 1112296, 1044072, 1121596, 1099830 allows an unauthenticated remote attacker to potentially impact the availability, integrity and confidentiality of the gateways via an authentication bypass by capture-replay.CVE-2023-5102sick agapu0200+13y ago09-10-2023 12:09

Insufficient Control Flow Management in RDT400 in SICK APU allows an unprivileged remote attacker to potentially enable hidden functionality via HTTP requests.CVE-2023-5100sick agapu0200+13y ago09-10-2023 12:05

Cleartext Transmission of Sensitive Information in RDT400 in SICK APU allows an unprivileged remote attacker to retrieve potentially sensitive information via intercepting network traffic that is not encrypted.