Critical severity · published Oct 17, 2024
CVE-2024-10025
Vulnerability in SICK CLV6xx, SICK Lector6xx and SICK RFx6xx
9.1
CVSS
0.8%
EPSS
No
On KEV
Description
A vulnerability in the .sdd file allows an attacker to read default passwords stored in plain text within the code. By exploiting these plaintext credentials, an attacker can log into affected SICK products as an “Authorized Client” if the customer has not changed the default password.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
None
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.8% · higher than 55% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
SC
SICK CLV6xx · SICK AG
all versions · source: vendor
SL
SICK Lector6xx · SICK AG
all versions · source: vendor
SR
SICK RFx6xx · SICK AG
all versions · source: vendor
RF
Rfu620-10507 Firmware · Sick
0 · source: CISA
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2024-10025
CVE.org
https://www.cve.org/CVERecord?id=CVE-2024-10025
cdn.sick.com
https://cdn.sick.com/media/docs/1/11/411/Special_information_CYBERSECURITY_BY_SICK_en_IM0084411.PDF
sick.com
https://sick.com/psirt
www.cisa.gov
https://www.cisa.gov/resources-tools/resources/ics-recommended-practices
www.first.org
https://www.first.org/cvss/calculator/3.1
www.sick.com
https://www.sick.com/.well-known/csaf/white/2024/sca-2024-0003.json
www.sick.com
https://www.sick.com/.well-known/csaf/white/2024/sca-2024-0003.pdf
