Vulnerability · Published Jun 19, 2023 · Assigned by SICK AG
CVE-2023-31411
Critical 9.8
In plain English
A critical-severity security flaw in EventCam App from SICK AG. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.9% (higher than 60% of all known vulnerabilities).
Severity (CVSS 3.1)9.8Critical
Exploit odds (30 days)0.9%top 40.1% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
A remote unprivileged attacker can modify and access configuration settings on the EventCam App due to the absence of API authentication. The lack of authentication in the API allows the attacker to potentially compromise the functionality of the EventCam App.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| SICK AG | EventCam App | all versions |
References
- https://sick.com/psirt issue-tracking
- https://sick.com/.well-known/csaf/white/2023/sca-2023-0005.pdf vendor-advisory
- https://sick.com/.well-known/csaf/white/2023/sca-2023-0005.json x_csaf