Vulnerability · Published Mar 6, 2026 · Assigned by SICK AG

CVE-2026-2330CVE-2026-2330

Critical 9.4

In plain English

A critical-severity security flaw in SICK Lector83x from SICK AG. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.7% (higher than 55% of all known vulnerabilities).

Severity (CVSS 3.1)9.4Critical

Exploit odds (30 days)0.7%top 45.4% of all CVEs

Exploited in the wildNo reportsCISA SSVC: none

Attack toolingNoneno public tooling known

Official description

An attacker may access restricted filesystem areas on the device via the CROWN REST interface due to incomplete whitelist enforcement. Certain directories intended for internal testing were not covered by the whitelist and are accessible without authentication. An unauthenticated attacker could place a manipulated parameter file that becomes active after a reboot, allowing modification of critical device settings, including network configuration and application parameters.

Affected products (as reported)

Vendor	Product	Versions
SICK AG	SICK Lector85x	0 – before 2.8.0
SICK AG	SICK Lector83x	0 – before 2.8.0

Weakness: CWE-552 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:H

References

https://www.sick.com/psirt x_SICK PSIRT Security Advisories
https://www.sick.com/media/docs/9/19/719/special_information_sick_operating_guidelines_cybersecurity_by_sick_en_im0106719.pdf x_SICK Operating Guidelines
https://www.cisa.gov/resources-tools/resources/ics-recommended-practices x_ICS-CERT recommended practices on Industrial Security
https://www.first.org/cvss/calculator/3.1 x_CVSS v3.1 Calculator
https://www.sick.com/.well-known/csaf/white/2026/sca-2026-0006.json x_The canonical URL.
https://www.sick.com/.well-known/csaf/white/2026/sca-2026-0006.pdf vendor-advisory