SA
Vendor
SICK AG
156
CVEs
0
On KEV
1
New 30D
Products
SC7.5
Sick_Safetyscanners_Base CPP Driver
SICK AG
1 CVEs0 on KEV1 new
TD9.1
TDC-X401GL
SICK AG
15 CVEs0 on KEV0 new
BA9.8
Baggage Analytics
SICK AG
13 CVEs0 on KEV0 new
LD9.8
Logistic Diagnostic Analytics
SICK AG
13 CVEs0 on KEV0 new
PA9.8
Package Analytics
SICK AG
13 CVEs0 on KEV0 new
TA9.8
Tire Analytics
SICK AG
13 CVEs0 on KEV0 new
EA9.8
Enterprise Analytics
SICK AG
10 CVEs0 on KEV0 new
SF9.8
SICK Field Analytics
SICK AG
9 CVEs0 on KEV0 new
SM9.8
SICK Media Server
SICK AG
9 CVEs0 on KEV0 new
SI9.0
SICK InspectorP61x
SICK AG
6 CVEs0 on KEV0 new
SI9.0
SICK InspectorP62x
SICK AG
6 CVEs0 on KEV0 new
IG8.8
Incoming Goods Suite
SICK AG
4 CVEs0 on KEV0 new
FA7.5
Field Analytics
SICK AG
3 CVEs0 on KEV0 new
SD9.8
SICK DL100-2xxxxxxx
SICK AG
3 CVEs0 on KEV0 new
TA9.8
TLOC100-100 all Firmware versions
SICK AG
3 CVEs0 on KEV0 new
SF7.5
SICK FLX3-CPUC200
SICK AG
2 CVEs0 on KEV0 new
SI8.8
SICK InspectorP8xx
SICK AG
2 CVEs0 on KEV0 new
SL9.8
SICK Lector83x
SICK AG
2 CVEs0 on KEV0 new
SL9.8
SICK Lector85x
SICK AG
2 CVEs0 on KEV0 new
SL8.8
SICK Lector8xx
SICK AG
2 CVEs0 on KEV0 new
SL9.1
SICK LMS1000
SICK AG
2 CVEs0 on KEV0 new
SM9.1
SICK MRS1000
SICK AG
2 CVEs0 on KEV0 new
TI9.0
TiM3xx
SICK AG
2 CVEs0 on KEV0 new
IC9.4
ICR890-4
SICK AG
1 CVEs0 on KEV0 new
IN9.4
InspectorP61x
SICK AG
1 CVEs0 on KEV0 new
IN9.4
InspectorP62x
SICK AG
1 CVEs0 on KEV0 new
IN9.4
InspectorP63x
SICK AG
1 CVEs0 on KEV0 new
IN9.4
InspectorP64x
SICK AG
1 CVEs0 on KEV0 new
IN9.4
InspectorP65x
SICK AG
1 CVEs0 on KEV0 new
MS6.1
Media Server
SICK AG
1 CVEs0 on KEV0 new
MS7.5
MSC800
SICK AG
1 CVEs0 on KEV0 new
SC8.3
Sentio Creator Extension 'Device Manager'
SICK AG
1 CVEs0 on KEV0 new
SC9.1
SICK CLV6xx
SICK AG
1 CVEs0 on KEV0 new
SF7.5
SICK FLX0-GPNT100
SICK AG
1 CVEs0 on KEV0 new
SI8.8
SICK Incoming Goods Suite
SICK AG
1 CVEs0 on KEV0 new
SL9.1
SICK Lector6xx
SICK AG
1 CVEs0 on KEV0 new
SM9.9
SICK MEAC300
SICK AG
1 CVEs0 on KEV0 new
SM5.3
SICK multiScan1XX
SICK AG
1 CVEs0 on KEV0 new
SP5.3
SICK picoScan1XX
SICK AG
1 CVEs0 on KEV0 new
SR9.1
SICK RFx6xx
SICK AG
1 CVEs0 on KEV0 new
TL7.5
TLOC100-100
SICK AG
1 CVEs0 on KEV0 new
TW7.5
TLOC100-100 with Firmware <7.1.1
SICK AG
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-101290 | SC Sick_Safetyscanners_Base CPP Driver SICK AG | 7.5 | Oct 15 | No description published yet |
| CVE-2026-80469 | SC Sentio Creator Extension 'Device Manager' SICK AG | 8.3 | Sep 11 | No description published yet |
| CVE-2026-11841 | IN InspectorP64x SICK AG | 9.4 | Jul 28 | No description published yet |
| CVE-2026-2331 | SL SICK Lector83x SICK AG | 9.8 | Mar 6 | No description published yet |
| CVE-2026-2330 | SL SICK Lector83x SICK AG | 9.4 | Mar 6 | No description published yet |
| CVE-2026-1627 | SM SICK MRS1000 SICK AG | 8.1 | Feb 27 | An attacker may exploit the use of outdated and weak MAC algorithms in the device’s SSH service to potentially compromise the integrity of the SSH session, allowing manipulation… |
| CVE-2026-1626 | SM SICK MRS1000 SICK AG | 9.1 | Feb 27 | An attacker may exploit the use of weak CBC-based cipher suites in the device’s SSH service to potentially observe or manipulate parts of the encrypted SSH communication, if they… |
| CVE-2026-22646 | IG Incoming Goods Suite SICK AG | 7.5 | Jan 15 | Certain error messages returned by the application expose internal system details that should not be visible to end users, providing attackers with valuable reconnaissance… |
| CVE-2026-22645 | IG Incoming Goods Suite SICK AG | 5.3 | Jan 15 | The application discloses all used components, versions and license information to unauthenticated actors, giving attackers the opportunity to target known security… |
| CVE-2026-22644 | IG Incoming Goods Suite SICK AG | 7.5 | Jan 15 | Certain requests pass the authentication token in the URL as string query parameter, making it vulnerable to theft through server logs, proxy logs and Referer headers, which could… |
| CVE-2026-22919 | TD TDC-X401GL SICK AG | 4.8 | Jan 15 | An attacker with administrative access may inject malicious content into the login page, potentially enabling cross-site scripting (XSS) attacks, leading to the extraction of… |
| CVE-2026-22918 | TD TDC-X401GL SICK AG | 8.2 | Jan 15 | An attacker may exploit missing protection against clickjacking by tricking users into performing unintended actions through maliciously crafted web pages, leading to the… |
| CVE-2026-22917 | TD TDC-X401GL SICK AG | 7.5 | Jan 15 | Improper input handling in a system endpoint may allow attackers to overload resources, causing a denial of service |
| CVE-2026-22916 | TD TDC-X401GL SICK AG | 5.4 | Jan 15 | An attacker with low privileges may be able to trigger critical system functions such as reboot or factory reset without proper restrictions, potentially leading to service… |
| CVE-2026-22915 | TD TDC-X401GL SICK AG | 6.5 | Jan 15 | An attacker with low privileges may be able to read files from specific directories on the device, potentially exposing sensitive information |
| CVE-2026-22914 | TD TDC-X401GL SICK AG | 6.5 | Jan 15 | An attacker with limited permissions may still be able to write files to specific locations on the device, potentially leading to system manipulation |
| CVE-2026-22913 | TD TDC-X401GL SICK AG | 6.1 | Jan 15 | Improper handling of a URL parameter may allow attackers to execute code in a user's browser after login |
| CVE-2026-22912 | TD TDC-X401GL SICK AG | 6.1 | Jan 15 | Improper validation of a login parameter may allow attackers to redirect users to malicious websites after authentication |
| CVE-2026-22911 | TD TDC-X401GL SICK AG | 7.5 | Jan 15 | Firmware update files may expose password hashes for system accounts, which could allow a remote attacker to recover credentials and gain unauthorized access to the device |
| CVE-2026-22910 | TD TDC-X401GL SICK AG | 9.1 | Jan 15 | The device is deployed with weak and publicly known default passwords for certain hidden user levels, increasing the risk of unauthorized access |
| CVE-2026-22909 | TD TDC-X401GL SICK AG | 9.1 | Jan 15 | Certain system functions may be accessed without proper authorization, allowing attackers to start, stop, or delete installed applications, potentially disrupting system… |
| CVE-2026-22908 | TD TDC-X401GL SICK AG | 9.1 | Jan 15 | Uploading unvalidated container images may allow remote attackers to gain full access to the system, potentially compromising its integrity and confidentiality |
| CVE-2026-22907 | TD TDC-X401GL SICK AG | 9.1 | Jan 15 | An attacker may gain unauthorized access to the host filesystem, potentially allowing them to read and modify system data |
| CVE-2025-59463 | TA TLOC100-100 all Firmware versions SICK AG | 7.5 | Oct 27 | Denial-of-service (DoS) via chunk size mismatch |
| CVE-2025-59462 | TA TLOC100-100 all Firmware versions SICK AG | 7.5 | Oct 27 | Denial-of-service (DoS) via delayed or missing client response |
| CVE-2025-59461 | TA TLOC100-100 all Firmware versions SICK AG | 9.8 | Oct 27 | API does not require authentication |
| CVE-2025-59460 | TW TLOC100-100 with Firmware <7.1.1 SICK AG | 7.5 | Oct 27 | Unsecure access configuration |
| CVE-2025-59459 | TL TLOC100-100 SICK AG | 7.5 | Oct 27 | Denial-of-service (DoS) via resource consumption |
| CVE-2025-58579 | TA Tire Analytics SICK AG | 5.3 | Oct 6 | Username Disclosure Through Missing Authentication |
| CVE-2025-58591 | TA Tire Analytics SICK AG | 7.5 | Oct 6 | Path Traversal |
| CVE-2025-58590 | PA Package Analytics SICK AG | 7.5 | Oct 6 | Path traversal |
| CVE-2025-58589 | TA Tire Analytics SICK AG | 6.5 | Oct 6 | Information Disclosure Through Stacktrace |
| CVE-2025-58587 | EA Enterprise Analytics SICK AG | 9.8 | Oct 6 | Improper Restriction of Excessive Authentication Attempts |
| CVE-2025-58586 | BA Baggage Analytics SICK AG | 5.3 | Oct 6 | User Enumeration by excessive error output |
| CVE-2025-58585 | PA Package Analytics SICK AG | 7.5 | Oct 6 | Sensitive Information Disclosure Through Missing Authentication |
| CVE-2025-58584 | BA Baggage Analytics SICK AG | 7.5 | Oct 6 | Plain Text Transmission of Username and Password in the URL |
| CVE-2025-58583 | EA Enterprise Analytics SICK AG | 5.3 | Oct 6 | User Enumeration |
| CVE-2025-58582 | EA Enterprise Analytics SICK AG | 7.5 | Oct 6 | Uncontrolled Resource Consumption via log file |
| CVE-2025-58581 | EA Enterprise Analytics SICK AG | 4.3 | Oct 6 | Information Disclosure Through Stacktrace-/MQTT/Config/changeAll |
| CVE-2025-58580 | EA Enterprise Analytics SICK AG | 5.3 | Oct 6 | Injection via log file |
| CVE-2025-58578 | EA Enterprise Analytics SICK AG | 4.3 | Oct 6 | Unlimited user creation by authorized users |
| CVE-2025-9914 | TA Tire Analytics SICK AG | 7.5 | Oct 6 | The credentials of the users stored in the system's local database can be used for the log in, making it possible for an attacker to gain unauthorized access |
| CVE-2025-9913 | PA Package Analytics SICK AG | 6.1 | Oct 6 | Cross Site Scripting: Session Hijacking |
| CVE-2025-49200 | SF SICK Field Analytics SICK AG | 7.5 | Jun 12 | Unencrypted backup contains sensitive information |
| CVE-2025-49199 | SF SICK Field Analytics SICK AG | 9.8 | Jun 12 | Backup files can be modified and uploaded |
| CVE-2025-49198 | SM SICK Media Server SICK AG | 7.5 | Jun 12 | Poor quality of randomness in authorization tokens |
| CVE-2025-49197 | SM SICK Media Server SICK AG | 7.5 | Jun 12 | Deprecated TLS version supported |
| CVE-2025-49196 | SF SICK Field Analytics SICK AG | 9.1 | Jun 12 | Deprecated TLS version supported |
| CVE-2025-49195 | SM SICK Media Server SICK AG | 9.8 | Jun 12 | No protection against brute-force attacks |
| CVE-2025-49194 | SM SICK Media Server SICK AG | 7.5 | Jun 12 | Unencrypted communication |
| CVE-2025-49193 | MS Media Server SICK AG | 6.1 | Jun 12 | Missing HTTP Security Headers |
| CVE-2025-49192 | SF SICK Field Analytics SICK AG | 6.1 | Jun 12 | Clickjacking |
| CVE-2025-49191 | SF SICK Field Analytics SICK AG | 6.1 | Jun 12 | Dashboards and iFrames can link malicious web content |
| CVE-2025-49190 | SF SICK Field Analytics SICK AG | 5.8 | Jun 12 | Server-Side Request Forgery |
| CVE-2025-49189 | SM SICK Media Server SICK AG | 6.1 | Jun 12 | Cookie missing HttpOnly flag |
| CVE-2025-49188 | SF SICK Field Analytics SICK AG | 7.5 | Jun 12 | Sensitive Data in URL |
| CVE-2025-49187 | SF SICK Field Analytics SICK AG | 5.3 | Jun 12 | User enumeration |
| CVE-2025-49186 | FA Field Analytics SICK AG | 6.5 | Jun 12 | No brute-force protection |
| CVE-2025-49185 | SF SICK Field Analytics SICK AG | 5.4 | Jun 12 | Stored Cross-Site-Script |
| CVE-2025-49184 | LD Logistic Diagnostic Analytics SICK AG | 7.5 | Jun 12 | Information disclosure to unauthorized user |