Sick vulnerabilities | LiveThreat CVE Feed

CVE	Product	CVSS	EPSS	Published	Summary
CVE-2026-1627	LF Lms1000 Firmware Sick	8.1	0%	Feb 27	An attacker may exploit the use of outdated and weak MAC algorithms in the device’s SSH service to potentially compromise the integrity of the SSH session, allowing manipulation…
CVE-2026-1626	MF Mrs1000 Firmware Sick	9.1	0%	Feb 27	An attacker may exploit the use of weak CBC-based cipher suites in the device’s SSH service to potentially observe or manipulate parts of the encrypted SSH communication, if they…
CVE-2026-22646	IG Incoming Goods Suite Sick	7.5	0%	Jan 15	Certain error messages returned by the application expose internal system details that should not be visible to end users, providing attackers with valuable reconnaissance…
CVE-2026-22645	IG Incoming Goods Suite Sick	5.3	0%	Jan 15	The application discloses all used components, versions and license information to unauthenticated actors, giving attackers the opportunity to target known security…
CVE-2026-22644	IG Incoming Goods Suite Sick	7.5	1%	Jan 15	Certain requests pass the authentication token in the URL as string query parameter, making it vulnerable to theft through server logs, proxy logs and Referer headers, which could…
CVE-2026-22919	TF Tdc-x401gl Firmware Sick	4.8	0%	Jan 15	An attacker with administrative access may inject malicious content into the login page, potentially enabling cross-site scripting (XSS) attacks, leading to the extraction of…
CVE-2026-22918	TF Tdc-x401gl Firmware Sick	8.2	0%	Jan 15	An attacker may exploit missing protection against clickjacking by tricking users into performing unintended actions through maliciously crafted web pages, leading to the…
CVE-2026-22917	TF Tdc-x401gl Firmware Sick	7.5	1%	Jan 15	Improper input handling in a system endpoint may allow attackers to overload resources, causing a denial of service
CVE-2026-22916	TF Tdc-x401gl Firmware Sick	5.4	0%	Jan 15	An attacker with low privileges may be able to trigger critical system functions such as reboot or factory reset without proper restrictions, potentially leading to service…
CVE-2026-22915	TF Tdc-x401gl Firmware Sick	6.5	0%	Jan 15	An attacker with low privileges may be able to read files from specific directories on the device, potentially exposing sensitive information
CVE-2026-22914	TF Tdc-x401gl Firmware Sick	6.5	0%	Jan 15	An attacker with limited permissions may still be able to write files to specific locations on the device, potentially leading to system manipulation
CVE-2026-22913	TF Tdc-x401gl Firmware Sick	6.1	0%	Jan 15	Improper handling of a URL parameter may allow attackers to execute code in a user's browser after login
CVE-2026-22912	TF Tdc-x401gl Firmware Sick	6.1	0%	Jan 15	Improper validation of a login parameter may allow attackers to redirect users to malicious websites after authentication
CVE-2026-22911	TF Tdc-x401gl Firmware Sick	7.5	1%	Jan 15	Firmware update files may expose password hashes for system accounts, which could allow a remote attacker to recover credentials and gain unauthorized access to the device
CVE-2026-22910	TF Tdc-x401gl Firmware Sick	9.1	0%	Jan 15	The device is deployed with weak and publicly known default passwords for certain hidden user levels, increasing the risk of unauthorized access
CVE-2026-22909	TF Tdc-x401gl Firmware Sick	9.1	1%	Jan 15	Certain system functions may be accessed without proper authorization, allowing attackers to start, stop, or delete installed applications, potentially disrupting system…
CVE-2026-22908	TF Tdc-x401gl Firmware Sick	9.1	1%	Jan 15	Uploading unvalidated container images may allow remote attackers to gain full access to the system, potentially compromising its integrity and confidentiality
CVE-2026-22907	TF Tdc-x401gl Firmware Sick	9.1	0%	Jan 15	An attacker may gain unauthorized access to the host filesystem, potentially allowing them to read and modify system data
CVE-2025-59463	TF Tloc100-100 Firmware Sick	7.5	0%	Oct 27	Denial-of-service (DoS) via chunk size mismatch
CVE-2025-59462	TF Tloc100-100 Firmware Sick	7.5	1%	Oct 27	Denial-of-service (DoS) via delayed or missing client response
CVE-2025-59461	TF Tloc100-100 Firmware Sick	9.8	0%	Oct 27	API does not require authentication
CVE-2025-59460	TF Tloc100-100 Firmware Sick	7.5	0%	Oct 27	Unsecure access configuration
CVE-2025-59459	TF Tloc100-100 Firmware Sick	7.5	0%	Oct 27	Denial-of-service (DoS) via resource consumption
CVE-2025-58579	BA Baggage Analytics Sick	5.3	0%	Oct 6	Username Disclosure Through Missing Authentication
CVE-2025-58591	TA Tire Analytics Sick	7.5	1%	Oct 6	Path Traversal
CVE-2025-58590	TA Tire Analytics Sick	7.5	1%	Oct 6	Path traversal
CVE-2025-58589	PA Package Analytics Sick	6.5	0%	Oct 6	Information Disclosure Through Stacktrace
CVE-2025-58587	EA Enterprise Analytics Sick	9.8	0%	Oct 6	Improper Restriction of Excessive Authentication Attempts
CVE-2025-58586	LD Logistic Diagnostic Analytics Sick	5.3	0%	Oct 6	User Enumeration by excessive error output
CVE-2025-58585	PA Package Analytics Sick	7.5	0%	Oct 6	Sensitive Information Disclosure Through Missing Authentication
CVE-2025-58584	TA Tire Analytics Sick	7.5	0%	Oct 6	Plain Text Transmission of Username and Password in the URL
CVE-2025-58583	EA Enterprise Analytics Sick	5.3	0%	Oct 6	User Enumeration
CVE-2025-58582	EA Enterprise Analytics Sick	7.5	1%	Oct 6	Uncontrolled Resource Consumption via log file
CVE-2025-58581	EA Enterprise Analytics Sick	4.3	0%	Oct 6	Information Disclosure Through Stacktrace-/MQTT/Config/changeAll
CVE-2025-58580	EA Enterprise Analytics Sick	5.3	0%	Oct 6	Injection via log file
CVE-2025-58578	EA Enterprise Analytics Sick	4.3	0%	Oct 6	Unlimited user creation by authorized users
CVE-2025-9914	PA Package Analytics Sick	7.5	0%	Oct 6	The credentials of the users stored in the system's local database can be used for the log in, making it possible for an attacker to gain unauthorized access
CVE-2025-9913	BA Baggage Analytics Sick	6.1	0%	Oct 6	Cross Site Scripting: Session Hijacking
CVE-2025-49200	FA Field Analytics Sick	7.5	0%	Jun 12	Unencrypted backup contains sensitive information
CVE-2025-49199	FA Field Analytics Sick	9.8	0%	Jun 12	Backup files can be modified and uploaded
CVE-2025-49198	MS Media Server Sick	7.5	0%	Jun 12	Poor quality of randomness in authorization tokens
CVE-2025-49197	MS Media Server Sick	7.5	0%	Jun 12	Deprecated TLS version supported
CVE-2025-49196	FA Field Analytics Sick	9.1	0%	Jun 12	Deprecated TLS version supported
CVE-2025-49195	MS Media Server Sick	9.8	1%	Jun 12	No protection against brute-force attacks
CVE-2025-49194	MS Media Server Sick	7.5	0%	Jun 12	Unencrypted communication
CVE-2025-49193	LD Logistic Diagnostic Analytics Sick	6.1	0%	Jun 12	Missing HTTP Security Headers
CVE-2025-49192	FA Field Analytics Sick	6.1	0%	Jun 12	Clickjacking
CVE-2025-49191	FA Field Analytics Sick	6.1	0%	Jun 12	Dashboards and iFrames can link malicious web content
CVE-2025-49190	FA Field Analytics Sick	5.8	0%	Jun 12	Server-Side Request Forgery
CVE-2025-49189	MS Media Server Sick	6.1	0%	Jun 12	Cookie missing HttpOnly flag
CVE-2025-49188	FA Field Analytics Sick	7.5	0%	Jun 12	Sensitive Data in URL
CVE-2025-49187	FA Field Analytics Sick	5.3	0%	Jun 12	User enumeration
CVE-2025-49186	FA Field Analytics Sick	6.5	0%	Jun 12	No brute-force protection
CVE-2025-49185	FA Field Analytics Sick	5.4	0%	Jun 12	Stored Cross-Site-Script
CVE-2025-49184	EA Enterprise Analytics Sick	7.5	0%	Jun 12	Information disclosure to unauthorized user
CVE-2025-49183	MS Media Server Sick	7.5	0%	Jun 12	Unencrypted communication (HTTP)
CVE-2025-49182	MS Media Server Sick	9.8	1%	Jun 12	Credential disclosure
CVE-2025-49181	MS Media Server Sick	8.6	0%	Jun 12	Configurations endpoint does not require authorization
CVE-2024-10776	IF Inspector62x Firmware Sick	8.2	1%	Dec 6	SICK InspectorP61x and SICK InspectorP62x: missing authentication
CVE-2024-10774	IF Inspector62x Firmware Sick	7.3	0%	Dec 6	SICK InspectorP61x and SICK InspectorP62x have unauthenticated CROWN APIs