SA
Vendor
SICK AG
32
CVEs
0
On KEV
1
New 30D
Products
SC7.5
Sick_Safetyscanners_Base CPP Driver
SICK AG
1 CVEs0 on KEV1 new
TD9.1
TDC-X401GL
SICK AG
13 CVEs0 on KEV0 new
IG7.5
Incoming Goods Suite
SICK AG
3 CVEs0 on KEV0 new
SL9.8
SICK Lector83x
SICK AG
2 CVEs0 on KEV0 new
SL9.8
SICK Lector85x
SICK AG
2 CVEs0 on KEV0 new
SL9.1
SICK LMS1000
SICK AG
2 CVEs0 on KEV0 new
SM9.1
SICK MRS1000
SICK AG
2 CVEs0 on KEV0 new
IC9.4
ICR890-4
SICK AG
1 CVEs0 on KEV0 new
IN9.4
InspectorP61x
SICK AG
1 CVEs0 on KEV0 new
IN9.4
InspectorP62x
SICK AG
1 CVEs0 on KEV0 new
IN9.4
InspectorP63x
SICK AG
1 CVEs0 on KEV0 new
IN9.4
InspectorP64x
SICK AG
1 CVEs0 on KEV0 new
IN9.4
InspectorP65x
SICK AG
1 CVEs0 on KEV0 new
SC8.3
Sentio Creator Extension 'Device Manager'
SICK AG
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-101290 | SC Sick_Safetyscanners_Base CPP Driver SICK AG | 7.5 | Oct 15 | No description published yet |
| CVE-2026-80469 | SC Sentio Creator Extension 'Device Manager' SICK AG | 8.3 | Sep 11 | No description published yet |
| CVE-2026-11841 | IN InspectorP64x SICK AG | 9.4 | Jul 28 | No description published yet |
| CVE-2026-2331 | SL SICK Lector83x SICK AG | 9.8 | Mar 6 | No description published yet |
| CVE-2026-2330 | SL SICK Lector85x SICK AG | 9.4 | Mar 6 | No description published yet |
| CVE-2026-1627 | SL SICK LMS1000 SICK AG | 8.1 | Feb 27 | An attacker may exploit the use of outdated and weak MAC algorithms in the device’s SSH service to potentially compromise the integrity of the SSH session, allowing manipulation… |
| CVE-2026-1626 | SL SICK LMS1000 SICK AG | 9.1 | Feb 27 | An attacker may exploit the use of weak CBC-based cipher suites in the device’s SSH service to potentially observe or manipulate parts of the encrypted SSH communication, if they… |
| CVE-2026-22646 | IG Incoming Goods Suite SICK AG | 7.5 | Jan 15 | Certain error messages returned by the application expose internal system details that should not be visible to end users, providing attackers with valuable reconnaissance… |
| CVE-2026-22645 | IG Incoming Goods Suite SICK AG | 5.3 | Jan 15 | The application discloses all used components, versions and license information to unauthenticated actors, giving attackers the opportunity to target known security… |
| CVE-2026-22644 | IG Incoming Goods Suite SICK AG | 7.5 | Jan 15 | Certain requests pass the authentication token in the URL as string query parameter, making it vulnerable to theft through server logs, proxy logs and Referer headers, which could… |
| CVE-2026-22919 | TD TDC-X401GL SICK AG | 4.8 | Jan 15 | An attacker with administrative access may inject malicious content into the login page, potentially enabling cross-site scripting (XSS) attacks, leading to the extraction of… |
| CVE-2026-22918 | TD TDC-X401GL SICK AG | 8.2 | Jan 15 | An attacker may exploit missing protection against clickjacking by tricking users into performing unintended actions through maliciously crafted web pages, leading to the… |
| CVE-2026-22917 | TD TDC-X401GL SICK AG | 7.5 | Jan 15 | Improper input handling in a system endpoint may allow attackers to overload resources, causing a denial of service |
| CVE-2026-22916 | TD TDC-X401GL SICK AG | 5.4 | Jan 15 | An attacker with low privileges may be able to trigger critical system functions such as reboot or factory reset without proper restrictions, potentially leading to service… |
| CVE-2026-22915 | TD TDC-X401GL SICK AG | 6.5 | Jan 15 | An attacker with low privileges may be able to read files from specific directories on the device, potentially exposing sensitive information |
| CVE-2026-22914 | TD TDC-X401GL SICK AG | 6.5 | Jan 15 | An attacker with limited permissions may still be able to write files to specific locations on the device, potentially leading to system manipulation |
| CVE-2026-22913 | TD TDC-X401GL SICK AG | 6.1 | Jan 15 | Improper handling of a URL parameter may allow attackers to execute code in a user's browser after login |
| CVE-2026-22912 | TD TDC-X401GL SICK AG | 6.1 | Jan 15 | Improper validation of a login parameter may allow attackers to redirect users to malicious websites after authentication |
| CVE-2026-22911 | TD TDC-X401GL SICK AG | 7.5 | Jan 15 | Firmware update files may expose password hashes for system accounts, which could allow a remote attacker to recover credentials and gain unauthorized access to the device |
| CVE-2026-22910 | TD TDC-X401GL SICK AG | 9.1 | Jan 15 | The device is deployed with weak and publicly known default passwords for certain hidden user levels, increasing the risk of unauthorized access |
| CVE-2026-22909 | TD TDC-X401GL SICK AG | 9.1 | Jan 15 | Certain system functions may be accessed without proper authorization, allowing attackers to start, stop, or delete installed applications, potentially disrupting system… |
| CVE-2026-22908 | TD TDC-X401GL SICK AG | 9.1 | Jan 15 | Uploading unvalidated container images may allow remote attackers to gain full access to the system, potentially compromising its integrity and confidentiality |
| CVE-2026-22907 | TD TDC-X401GL SICK AG | 9.1 | Jan 15 | An attacker may gain unauthorized access to the host filesystem, potentially allowing them to read and modify system data |