Vulnerabilities in SICK ICR890-4
SICK has found several security vulnerabilities in the SICK ICR890-4. If exploited, these could allow an unauthenticated remote attacker to compromise the availability or confidentiality of the SICK ICR890-4. Currently, SICK is not aware of any public exploits that specifically target any of the vulnerabilities. SICK has released a new version of the SICK ICR890-4 firmware and recommends updating to the latest version.
describes (8)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2023-3273US | high7.5 | — | ||
Improper Access Control in the SICK ICR890-4 could allow an unauthenticated remote attacker to affect the availability of the device by changing settings of the device such as the… | ||||
| CVE-2023-3272US | high7.5OT elevated | — | ||
Cleartext Transmission of Sensitive Information in the SICK ICR890-4 could allow a
remote attacker to gather sensitive information by intercepting network traffic that is not encry… | ||||
| CVE-2023-3271US | high7.5 | — | ||
Improper Access Control in the SICK ICR890-4 could allow an unauthenticated remote attacker to gather information about the system and download data via the REST API by accessing
u… | ||||
| CVE-2023-3270US | high7.5 | — | ||
Exposure of Sensitive Information to an Unauthorized Actor in the SICK ICR890-4 could allow an unauthenticated remote attacker to retrieve sensitive information about the system. | ||||
| CVE-2023-35699US | medium4.6OT elevated | — | ||
Cleartext Storage on Disk in the SICK ICR890-4 could allow an unauthenticated attacker with local access to the device to disclose sensitive information by accessing a SD card. | ||||
| CVE-2023-35698US | medium5.3 | — | ||
Observable Response Discrepancy in the SICK ICR890-4 could allow a remote attacker to identify valid usernames for the FTP server from the response given during a failed login
atte… | ||||
| CVE-2023-35697US | high7.5 | — | ||
Improper Restriction of Excessive Authentication Attempts in the SICK ICR890-4
could allow a remote attacker to brute-force user credentials. | ||||
| CVE-2023-35696US | high7.5 | — | ||
Unauthenticated endpoints in the SICK ICR890-4 could allow an unauthenticated
remote attacker to retrieve sensitive information about the device via HTTP requests. | ||||
references
External citations — patches, advisories, analysis.
remediations (8)
- MitigationSICK ICR890-4 with Firmware <V2.5.0
Please make sure that you apply general security practices when operating the SICK ICR890-4 like restricting physical access to the device. The following general security practices could mitigate the associated security risk.
- FixedSICK ICR890-4 with Firmware <V2.5.0
The recommended solution is to update the firmware to a version >= V2.5.0 as soon as possible.
- FixedSICK ICR890-4 with Firmware <V2.5.0
The recommended solution is to update the firmware to a version >= V2.5.0 as soon as possible.
- FixedSICK ICR890-4 with Firmware <V2.5.0
The recommended solution is to update the firmware to a version >= V2.5.0 as soon as possible.
- FixedSICK ICR890-4 with Firmware <V2.5.0
The recommended solution is to update the firmware to a version >= V2.5.0 as soon as possible.
- WorkaroundSICK ICR890-4 with Firmware <V2.5.0
SICK recommends to disable port 2111 & 2122 once the SICK ICR890-4 is put into operation.
- WorkaroundSICK ICR890-4 with Firmware <V2.5.0
SICK recommends to disable port 2111 & 2122 once the SICK ICR890-4 is put into operation.
- WorkaroundSICK ICR890-4 with Firmware <V2.5.0
SICK recommends to disable port 2111 & 2122 once the SICK ICR890-4 is put into operation.
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan