Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Advisory: SICK DL100-2xxxxxxx — sick.com/.well-known/csaf/white/2025/sca-2025-0004.json Clear all filters
TI-2025-20406 CVE-2025-27595 · GHSA-j4j6-8w77-m9g6

Weak hashing alghrythm

Priority MEDIUM 50

The device uses a weak hashing alghorithm to create the password hash.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0054 Published 2025-03-14 No fix listed CWE-328
TI-2025-20405 CVE-2025-27594 · GHSA-57j8-crh2-hv5w

Unencrypted transmission of password hash

Priority LOW 39

The device uses an unencrypted, proprietary protocol for communication.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00453 Published 2025-03-14 No fix listed CWE-319
TI-2025-20404 CVE-2025-27593 · GHSA-jqv5-4r34-g3x7

RCE due to Device Driver

Priority MEDIUM 42

The product can be used to distribute malicious code using SDD Device Drivers due to missing download verification checks, leading to code execution on target systems.

CVSS 3.1CRITICAL 9.3 Network No auth User interaction EPSS 0.0041 Published 2025-03-14 No fix listed CWE-494