by Kastro
Paper/Archive/CVE-2020-2076

CVE-2020-2076

SICK AG — SICK Package Analytics software up to and including version V04.0.0 are vulnerable to an authentication bypass by directly interfacing wi…

EPSS 1%CVSS 9.8
critical.is priorityof 100
43
CVSS 9.8 (NVD)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 69.6.696 × 2013.9No public exploit+100.0SSVC exploitation: unknown+100.0
Description · from the CVE record

SICK Package Analytics software up to and including version V04.0.0 are vulnerable to an authentication bypass by directly interfacing with the REST API. An attacker can send unauthorized requests, bypass current authentication controls presented by the application and could potentially write files without authentication.

Affected

ProductAffectedFixed inSource
SICK Package Analytics<=V04.0.0–CNA

Scores by source

NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References

refsick.com/de/en/service-and-support/the-sick-product-security-incident-response-team-sick-psirt/w/psirt/#advisories