by Kastro CVE-2024-10025
SICK AG SICK CLV6xx — Vulnerability in SICK CLV6xx, SICK Lector6xx and SICK RFx6xx
Description · from the CVE record
A vulnerability in the .sdd file allows an attacker to read default passwords stored in plain text within the code. By exploiting these plaintext credentials, an attacker can log into affected SICK products as an “Authorized Client” if the customer has not changed the default password.
Affected
ProductAffectedFixed inSource
SICK CLV6xxall versions–CNA
SICK Lector6xxall versions–CNA
SICK RFx6xxall versions–CNA
rfu620-10507_firmwareall versions–CISA-ADP
Scores by source
SICK AG (CNA)9.1CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H
CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: partial