AppEngine vulnerability affects SICK ICR890-4 and SICK InspectorP6xx devices
Multiple internal virtual filesystem paths are unintentionally accessible remotely in the SICK ICR890-4 and SICK InspectorP6xx devices. If exploited, this vulnerability could potentially allow an unauthenticated attacker to compromise the availability, integrity, and confidentiality of the devices.
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2026-11841US | — | — | ||
An attacker may perform unauthenticated read and write operations on sensitive filesystem areas via the AppEngine Fileaccess over HTTP due to improper access restrictions. A critic… | ||||
references
External citations — patches, advisories, analysis.
remediations (6)
- MitigationSICK InspectorP63x all firmware versions
Please make sure that only trusted entities have access to the device. Furthermore, you should apply the following General Security Measures when operating the product to mitigate the associated security risk. The collected resources ”SICK Operating Guidelines” and ”ICS-CERT recommended practices on Industrial Security” could help to implement the general security practices.
- MitigationSICK InspectorP64x all firmware versions
Please make sure that only trusted entities have access to the device. Furthermore, you should apply the following General Security Measures when operating the product to mitigate the associated security risk. The collected resources ”SICK Operating Guidelines” and ”ICS-CERT recommended practices on Industrial Security” could help to implement the general security practices.
- MitigationSICK InspectorP65x all firmware versions
Please make sure that only trusted entities have access to the device. Furthermore, you should apply the following General Security Measures when operating the product to mitigate the associated security risk. The collected resources ”SICK Operating Guidelines” and ”ICS-CERT recommended practices on Industrial Security” could help to implement the general security practices.
- FixedSICK ICR890-4 with firmware < 2.15.0
Users are recommended to upgrade to version 2.15.0.
- FixedSICK InspectorP61x with firmware < 5.4.0
Users are recommended to upgrade to version 5.4.0.
- FixedSICK InspectorP62x with firmware < 5.4.0
Users are recommended to upgrade to version 5.4.0.
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan