by Kastro
Paper/Archive/CVE-2026-22907

CVE-2026-22907

SICK AG TDC-X401GL — An attacker may gain unauthorized access to the host filesystem, potentially allowing them to read and modify system data.

EPSS 0.4%CVSS 9.9
critical.is priorityof 100
37
CVSS 9.9 (CNA)9.9 / 10 × 3029.7Not in CISA KEV+300.0EPSS percentile 38.4.384 × 207.7No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

An attacker may gain unauthorized access to the host filesystem, potentially allowing them to read and modify system data.

Affected

ProductAffectedFixed inSource
TDC-X401GL< 1.4.01.4.0CNA

Scores by source

SICK AG (CNA)9.9CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
NVD9.1CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
CISA ADPSSVCExploitation: none · Automatable: no · Technical impact: total

References

refsick.com/psirtrefsick.com/media/docs/9/19/719/special_information_sick_operating_guidelines_cybersecurity_by_sick_en_im0106719.pdfrefcisa.gov/resources-tools/resources/ics-recommended-practicesreffirst.org/cvss/calculator/3.1refsick.com/.well-known/csaf/white/2026/sca-2026-0001.jsonadvisorysick.com/.well-known/csaf/white/2026/sca-2026-0001.pdf